This page lists publicly disclosed CVE vulnerabilities affecting greg_donald destiney_links_script (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2006-2585 | SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | [email protected] | 6.4 | 1.12% | 2006-05-25 | 2026-06-16 |
| CVE-2006-2536 | Cross-site scripting (XSS) vulnerability in Destiney Links Script 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) "Search" (term parameter in index.php) and (2) "Add a Site" (add.php) fields. | [email protected] | 5.8 | 1.27% | 2006-05-22 | 2026-06-16 |
| CVE-2006-2535 | index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message. NOTE: this issue might be resultant from a more serious issue such as directory traversal. | [email protected] | 5.0 | 1.75% | 2006-05-22 | 2026-06-16 |
| CVE-2006-2534 | Destiney Links Script 2.1.2 does not protect library and other support files, which allows remote attackers to obtain the installation path via a direct URL to files in the (1) include and (2) themes/original directories. | [email protected] | 5.0 | 1.31% | 2006-05-22 | 2026-06-16 |