CVE-2006-2262

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-05-09 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.7 allows remote attackers to inject arbitrary web script or HTML via the image parameter.

Affected products

Singapore: 0.9.7

References

http://downloads.securityfocus.com/vulnerabilities/exploits/singapore-0.9.7-xss.txt
http://securityreason.com/securityalert/854
http://securitytracker.com/id?1016055
http://www.osvdb.org/25706
http://www.securityfocus.com/archive/1/433250/100/0/threaded
http://www.securityfocus.com/bid/17874
http://www.sgal.org/files/download/20060512-xss-patch.zip
https://exchange.xforce.ibmcloud.com/vulnerabilities/26352
http://downloads.securityfocus.com/vulnerabilities/exploits/singapore-0.9.7-xss.txt
http://securityreason.com/securityalert/854
http://securitytracker.com/id?1016055
http://www.osvdb.org/25706

Get alerted when CVE-2006-2262 or the next vulnerability affects your stack