Unrated severityNVD Advisory· Published May 19, 2006· Updated Jun 16, 2026

CVE-2006-2488

Description

Multiple cross-site scripting (XSS) vulnerabilities in Spymac WebOS (WOS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) del_folder, (2) nick, or (3) action parameters to (a) notes/index.php, (4) curr parameter to (b) ipod/get_ipod.php, and in (c) login.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Spymac/Web OS
cpe:2.3:o:spymac:spymac_web_os:5.0:*:*:*:*:*:*:*
LG/webOSllm-fuzzy
Range: = 5.0

Patches

Vulnerability mechanics

References

lostmon.blogspot.com/2006/05/multiple-cross-site-scripting-in.htmlnvdExploit
securitytracker.com/idnvdExploit
www.vupen.com/english/advisories/2006/1852nvd
exchange.xforce.ibmcloud.com/vulnerabilities/26522nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000