CVE-2006-2534
UnknownEPSS 1.34%
Last modified
CVE-2006-2534 is a vulnerability of currently unknown severity. Destiney Links Script 2.1.2 does not protect library and other support files, which allows remote attackers to obtain the installation path via a direct URL to files in the (1) include and (2) themes/original directories.. EPSS estimates a 1.34% chance of exploitation in the next 30 days.
Description
Destiney Links Script 2.1.2 does not protect library and other support files, which allows remote attackers to obtain the installation path via a direct URL to files in the (1) include and (2) themes/original directories.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Greg Donald | Destiney Links Script | 2.1.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-2534?
Destiney Links Script 2.1.2 does not protect library and other support files, which allows remote attackers to obtain the installation path via a direct URL to files in the (1) include and (2) themes/original directories.
How severe is CVE-2006-2534?
Severity scoring for CVE-2006-2534 is pending analysis. The EPSS model estimates a 1.34% probability of exploitation in the next 30 days.
How do I fix CVE-2006-2534?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-2528PHP remote file inclusion vulnerability in classified_right.…
- CVE-2006-2529editor/filemanager/upload/php/upload.php in FCKeditor before…
- CVE-2006-2530avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, an…
- CVE-2006-2531Ipswitch WhatsUp Professional 2006 only verifies the user's …
- CVE-2006-2532stats.php in Destiney Rated Images Script 0.5.0 allows remot…
- CVE-2006-2533Cross-site scripting (XSS) vulnerability in (1) addWeblog.ph…
- CVE-2006-2535index.php in Destiney Links Script 2.1.2 allows remote attac…
- CVE-2006-2536Cross-site scripting (XSS) vulnerability in Destiney Links S…
- CVE-2006-2537Multiple format string vulnerabilities in (a) OpenBOR 2.0046…
- CVE-2006-2538IE Tab 1.0.9 plugin for Mozilla Firefox 1.5.0.3 allows remot…
- CVE-2006-2539Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-U…
- CVE-2006-2540Privacy leak in install.php for Diesel PHP Job Site sends se…
Are you affected by CVE-2006-2534?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST