Destiney Links Script
Approved changes feed: RSS · Atom
cpe:2.3:a:greg_donald:destiney_links_script:2.1.2:*:*:*:*:*:*:*
part: a version: 2.1.2 update: *
| Vendor | Greg Donald (0d346160-45dc-5083-a597-a5747d58bd63) |
|---|---|
| Product | Destiney Links Script (014ec86b-ca02-5c66-bf69-4c0b64dbd828) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-2585 |
vulnerable | 2026-06-08 04:49:07.109493 |
Details available
SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2006-05-25T10:00:00.000Z
Updated: 2024-08-07T17:58:51.028Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2536 |
vulnerable | 2026-06-08 04:49:07.028187 |
Details available
Cross-site scripting (XSS) vulnerability in Destiney Links Script 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) "Search" (term parameter in index.php) and (2) "Add a Site" (add.php) fields.
Published: 2006-05-22T23:00:00.000Z
Updated: 2024-08-07T17:51:04.624Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2535 |
vulnerable | 2026-06-08 04:49:07.027876 |
Details available
index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message. NOTE: this issue might be resultant from a more serious issue such as directory traversal.
Published: 2006-05-22T23:00:00.000Z
Updated: 2024-08-07T17:51:04.776Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2534 |
vulnerable | 2026-06-08 04:49:07.027515 |
Details available
Destiney Links Script 2.1.2 does not protect library and other support files, which allows remote attackers to obtain the installation path via a direct URL to files in the (1) include and (2) themes/original directories.
Published: 2006-05-22T23:00:00.000Z
Updated: 2024-08-07T17:51:04.640Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.