Vulnerabilities > Albinator

DATE CVE VULNERABILITY TITLE RISK
2006-05-04 CVE-2006-2182 Remote File Include vulnerability in Albinator 2.0.8
Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.php, or (3) forgot.php in albinator 2.0.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Config_rootdir parameter.
network
low complexity
albinator
6.4
2006-05-04 CVE-2006-2181 Cross-Site Scripting vulnerability in Albinator
Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php.
network
albinator CWE-79
4.3