CVE-2006-3138

🗓️ 22 Jun 2006 22:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 46 Views🌐 WEB

Multiple XSS vulnerabilities in phpMyDirectory 10.4.

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2006-3138	22 Jun 200622:00	–	cvelist
EUVD	EUVD-2006-3135	7 Oct 202500:30	–	euvd
NVD	CVE-2006-3138	22 Jun 200622:06	–	nvd

NVD

Node

accomplishtechnology phpmydirectoryRange≤10.4.5

OR

accomplishtechnology phpmydirectoryMatch1.0

OR

accomplishtechnology phpmydirectoryMatch1.0.1

OR

accomplishtechnology phpmydirectoryMatch1.0.2

OR

accomplishtechnology phpmydirectoryMatch1.0.3

OR

accomplishtechnology phpmydirectoryMatch1.0.4

OR

accomplishtechnology phpmydirectoryMatch1.0.5

OR

accomplishtechnology phpmydirectoryMatch1.0.6

OR

accomplishtechnology phpmydirectoryMatch1.0.7

OR

accomplishtechnology phpmydirectoryMatch1.0.8

OR

accomplishtechnology phpmydirectoryMatch1.0.9

OR

accomplishtechnology phpmydirectoryMatch1.1.0

OR

accomplishtechnology phpmydirectoryMatch1.1.1

OR

accomplishtechnology phpmydirectoryMatch1.1.2

OR

accomplishtechnology phpmydirectoryMatch1.1.3

OR

accomplishtechnology phpmydirectoryMatch1.1.4

OR

accomplishtechnology phpmydirectoryMatch1.1.5

OR

accomplishtechnology phpmydirectoryMatch1.1.6

OR

accomplishtechnology phpmydirectoryMatch1.1.7

OR

accomplishtechnology phpmydirectoryMatch1.1.8

OR

accomplishtechnology phpmydirectoryMatch1.1.9

OR

accomplishtechnology phpmydirectoryMatch1.2.0

OR

accomplishtechnology phpmydirectoryMatch1.2.0b

OR

accomplishtechnology phpmydirectoryMatch1.2.1

OR

accomplishtechnology phpmydirectoryMatch1.3.0

OR

accomplishtechnology phpmydirectoryMatch1.3.0b

OR

accomplishtechnology phpmydirectoryMatch1.3.1

OR

accomplishtechnology phpmydirectoryMatch1.3.2

OR

accomplishtechnology phpmydirectoryMatch1.3.3

OR

accomplishtechnology phpmydirectoryMatch1.3.4

OR

accomplishtechnology phpmydirectoryMatch1.3.5

OR

accomplishtechnology phpmydirectoryMatch1.4.0

OR

accomplishtechnology phpmydirectoryMatch1.4.1

OR

accomplishtechnology phpmydirectoryMatch10.1.3

OR

accomplishtechnology phpmydirectoryMatch10.4.4

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/27211
osvdb	www.osvdb.org/26669
secunia	www.secunia.com/advisories/20718
vupen	www.vupen.com/english/advisories/2006/2427
osvdb	www.osvdb.org/26670
pridels0	www.pridels0.blogspot.com/2006/06/phpmydirectory-xss-vuln.html
osvdb	www.osvdb.org/26671
securityfocus	www.securityfocus.com/bid/18539

Parameter	Position	Path	Description	CWE
PIC	query param	offers-pix.php	XSS via PIC parameter in offers-pix.php	CWE-79
from	query param	cp/index.php	XSS via from parameter in cp/index.php	CWE-79
action	query param	cp/admin_index.php	XSS via action parameter in cp/admin_index.php	CWE-79

16 Apr 2026 00:27Current

6Medium risk

Vulners AI Score6

CVSS 24.3

EPSS0.00624

cve-2006-3138 cross-site scripting xss phpmydirectory web security vulnerability