CVE-2006-2419 - Cross-site scripting (XSS) vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter

Published May 16, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.22%

Description

Cross-site scripting (XSS) vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://kiki91.altervista.org/exploit/dir.txt
x_refsource_MISCExploit
http://secunia.com/advisories/20118
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.vupen.com/english/advisories/2006/1803
vdb-entryx_refsource_VUPEN

Link	Providers	Tags
http://kiki91.altervista.org/exploit/dir.txt		x_refsource_MISCExploit
http://secunia.com/advisories/20118		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.vupen.com/english/advisories/2006/1803		vdb-entryx_refsource_VUPEN

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 16, 2006

Updated Aug 7, 2024

Reserved May 15, 2006

Link CVE-2006-2419

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-2419

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-2419