CVE-2006-2419: PHP Directory Listing Script

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter.

Affected products

• PHP Directory Listing Script: any version

Published 2006-05-16. Last modified 2026-06-16.