CVE-2006-2532

stats.php in Destiney Rated Images Script 0.5.0 allows remote attackers to obtain the installation path via an invalid s parameter, which displays the path in…

published May 22, 2006

CVSS
—
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

stats.php in Destiney Rated Images Script 0.5.0 allows remote attackers to obtain the installation path via an invalid s parameter, which displays the path in an error message. NOTE: this issue was originally claimed to be SQL injection, but CVE analysis shows that the problem is related to an invalid value that prevents some variables from being set.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01144 · 66.4th percentile
Published
2006-05-22T23:00Z
EPSS history
Timeline
  • 22 MAY 23:00Z
    stats.php in Destiney Rated Images Script 0.5.0 allows remote attackers to obtain the installation path via an invalid s parameter, which displays the path in…
    cvelistv5