{"api_version":"1","generated_at":"2026-07-23T10:14:19+00:00","cve":"CVE-2006-2181","urls":{"html":"https://cve.report/CVE-2006-2181","api":"https://cve.report/api/cve/CVE-2006-2181.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-2181","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-2181"},"summary":{"title":"CVE-2006-2181","description":"Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-05-04 12:38:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26240","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26240","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/25243","name":"http://www.osvdb.org/25243","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/25242","name":"http://www.osvdb.org/25242","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/19952","name":"http://secunia.com/advisories/19952","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Albinator File Inclusion and Cross-Site Scripting Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/17826","name":"http://www.securityfocus.com/bid/17826","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Albinator Multiple Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html","name":"http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"- UNSECURED SYSTEMS -: albinator <= 2.0.8 Remote File Inclusion & XSS vuln","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/1643","name":"http://www.vupen.com/english/advisories/2006/1643","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2181","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2181","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"2181","vulnerable":"1","versionEndIncluding":"2.0.8","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"albinator","cpe5":"albinator","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2006","cve_id":"2181","cve":"CVE-2006-2181","epss":"0.083810000","percentile":"0.923260000","score_date":"2026-04-20","updated_at":"2026-04-21 00:07:48"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T17:43:27.758Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"albinator-multiple-xss(26240)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26240"},{"name":"25242","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/25242"},{"name":"ADV-2006-1643","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/1643"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html"},{"name":"17826","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/17826"},{"name":"25243","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/25243"},{"name":"19952","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/19952"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-05-03T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-19T15:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"albinator-multiple-xss(26240)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26240"},{"name":"25242","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/25242"},{"name":"ADV-2006-1643","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/1643"},{"tags":["x_refsource_MISC"],"url":"http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html"},{"name":"17826","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/17826"},{"name":"25243","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/25243"},{"name":"19952","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/19952"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-2181","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"albinator-multiple-xss(26240)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26240"},{"name":"25242","refsource":"OSVDB","url":"http://www.osvdb.org/25242"},{"name":"ADV-2006-1643","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/1643"},{"name":"http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html","refsource":"MISC","url":"http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html"},{"name":"17826","refsource":"BID","url":"http://www.securityfocus.com/bid/17826"},{"name":"25243","refsource":"OSVDB","url":"http://www.osvdb.org/25243"},{"name":"19952","refsource":"SECUNIA","url":"http://secunia.com/advisories/19952"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-2181","datePublished":"2006-05-04T10:00:00.000Z","dateReserved":"2006-05-03T00:00:00.000Z","dateUpdated":"2024-08-07T17:43:27.758Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-05-04 12:38:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:albinator:albinator:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.8","matchCriteriaId":"30EA9D58-064F-4BD7-A70A-C60F32E44CC3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"2181","Ordinal":"1","Title":"CVE-2006-2181","CVE":"CVE-2006-2181","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"2181","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php.","Type":"Description","Title":"CVE-2006-2181"},{"CveYear":"2006","CveId":"2181","Ordinal":"2","NoteData":"2006-05-04","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"2181","Ordinal":"3","NoteData":"2017-07-19","Type":"Other","Title":"Modified"}]}}}