5.9 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.5%
Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php.
secunia.com/advisories/19952
www.osvdb.org/25242
www.osvdb.org/25243
www.securityfocus.com/bid/17826
www.vupen.com/english/advisories/2006/1643
exchange.xforce.ibmcloud.com/vulnerabilities/26240
pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html