CVE-2006-2986

no score yetEPSS 3.9%

Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) lid parameter in index.php and the (2) title parameter in myslideshow.php.

EPSS: 3.9% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
Published: 2006-06-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

baby_katie_media:very_simple_car_lister
baby_katie_media:very_simple_realty_lister

References

http://secunia.com/advisories/20533
http://securityreason.com/securityalert/1084
http://www.securityfocus.com/archive/1/436411/100/0/threaded
http://www.securityfocus.com/bid/18350
http://www.vupen.com/english/advisories/2006/2238

Check your stack JSON