CVE-2006-3138

Published: Jun 22, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PIC parameter in offers-pix.php, (2) from parameter in cp/index.php, and (3) action parameter in cp/admin_index.php.

Affected (35)

Products: Accomplishtechnology: Phpmydirectory

Accomplishtechnology

1 product

Phpmydirectory

Configuration A

35 vulnerable

Vulnerable Software	Affected Versions
Accomplishtechnology Phpmydirectory	Up to 10.4.5
Accomplishtechnology Phpmydirectory	Version 1.0.1
Accomplishtechnology Phpmydirectory	Version 1.0.2
Accomplishtechnology Phpmydirectory	Version 1.0.3
Accomplishtechnology Phpmydirectory	Version 1.0.4
Accomplishtechnology Phpmydirectory	Version 1.0.5
Accomplishtechnology Phpmydirectory	Version 1.0.6
Accomplishtechnology Phpmydirectory	Version 1.0.7
Accomplishtechnology Phpmydirectory	Version 1.0.8
Accomplishtechnology Phpmydirectory	Version 1.0.9
Accomplishtechnology Phpmydirectory	Version 1.0
Accomplishtechnology Phpmydirectory	Version 1.1.0
Accomplishtechnology Phpmydirectory	Version 1.1.1
Accomplishtechnology Phpmydirectory	Version 1.1.2
Accomplishtechnology Phpmydirectory	Version 1.1.3
Accomplishtechnology Phpmydirectory	Version 1.1.4
Accomplishtechnology Phpmydirectory	Version 1.1.5
Accomplishtechnology Phpmydirectory	Version 1.1.6
Accomplishtechnology Phpmydirectory	Version 1.1.7
Accomplishtechnology Phpmydirectory	Version 1.1.8
Accomplishtechnology Phpmydirectory	Version 1.1.9
Accomplishtechnology Phpmydirectory	Version 1.2.0
Accomplishtechnology Phpmydirectory	Version 1.2.0 b
Accomplishtechnology Phpmydirectory	Version 1.2.1
Accomplishtechnology Phpmydirectory	Version 1.3.0
Accomplishtechnology Phpmydirectory	Version 1.3.0 b
Accomplishtechnology Phpmydirectory	Version 1.3.1
Accomplishtechnology Phpmydirectory	Version 1.3.2
Accomplishtechnology Phpmydirectory	Version 1.3.3
Accomplishtechnology Phpmydirectory	Version 1.3.4
Accomplishtechnology Phpmydirectory	Version 1.3.5
Accomplishtechnology Phpmydirectory	Version 1.4.0
Accomplishtechnology Phpmydirectory	Version 1.4.1
Accomplishtechnology Phpmydirectory	Version 10.1.3
Accomplishtechnology Phpmydirectory	Version 10.4.4