CVE-2006-2532 - CVE House
Back to Database
Status published Medium CVE-2006-2532

stats.php in Destiney Rated Images Script 0.5.0 allows remote attackers...

Vulnerability Description

stats.php in Destiney Rated Images Script 0.5.0 allows remote attackers to obtain the installation path via an invalid s parameter, which displays the path in an error message. NOTE: this issue was originally claimed to be SQL injection, but CVE analysis shows that the problem is related to an invalid value that prevents some variables from being set.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2532

Credits & Attribution

No credits recorded in the NVD database.

References

More from greg donald

View All →
CVE-2006-2585
SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote...
Medium 6.4
CVE-2006-2536
Cross-site scripting (XSS) vulnerability in Destiney Links Script 2.1.2 allows...
Medium 5.8
CVE-2006-2535
index.php in Destiney Links Script 2.1.2 allows remote attackers to...
Medium 5
CVE-2006-2534
Destiney Links Script 2.1.2 does not protect library and other...
Medium 5
CVE-2006-2533
Cross-site scripting (XSS) vulnerability in (1) addWeblog.php and (2) leaveComments.php...
Medium 5.8

Affected Vendor

greg donald

View all reports →

Affected Software

destiney rated images script
Vulnerable Versions:
0.5.0

Timeline

Official Publish: May 22nd, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.