CVE-2006-3138

no score yetEPSS 2.1%

Multiple cross-site scripting (XSS) vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PIC parameter in offers-pix.php, (2) from parameter in cp/index.php, and (3) action parameter in cp/admin_index.php.

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2006-06-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

accomplishtechnology:phpmydirectory

References

http://pridels0.blogspot.com/2006/06/phpmydirectory-xss-vuln.html
http://secunia.com/advisories/20718
http://www.osvdb.org/26669
http://www.osvdb.org/26670
http://www.osvdb.org/26671

Check your stack JSON