CVE-2006-2532

Published: May 22, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

stats.php in Destiney Rated Images Script 0.5.0 allows remote attackers to obtain the installation path via an invalid s parameter, which displays the path in an error message. NOTE: this issue was originally claimed to be SQL injection, but CVE analysis shows that the problem is related to an invalid value that prevents some variables from being set.

Affected (1)

Products: Greg Donald: Destiney Rated Images Script

1 product

Destiney Rated Images Script

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Greg Donald Destiney Rated Images Script	Version 0.5.0

References (6)

http://securityreason.com/securityalert/940

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/434691/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26603

Source: cve@mitre.org

http://securityreason.com/securityalert/940

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/434691/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26603

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.