CVE-2006-0217

Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the (1) item parameter in item.pl and (2) category parameter in itemlist.pl, which reflects the XSS in an error message. NOTE: the affected version might be wrong since the current version as of 20060116 is 3.6.1.

• http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0517.htmlExploit
• http://secunia.com/advisories/18477Exploit, Vendor Advisory
• http://www.osvdb.org/22443
• http://www.osvdb.org/22444
• http://www.securityfocus.com/bid/16239Exploit
• http://www.securityfocus.com/bid/16254
• http://www.vupen.com/english/advisories/2006/0187
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24138
• http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0517.htmlExploit
• http://secunia.com/advisories/18477Exploit, Vendor Advisory
• http://www.osvdb.org/22443
• http://www.osvdb.org/22444
• http://www.securityfocus.com/bid/16239Exploit
• http://www.securityfocus.com/bid/16254
• http://www.vupen.com/english/advisories/2006/0187
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24138

Published

Jan 16, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0211Cross-site scripting (XSS) vulnerability in forgotPassword.a…
• CVE-2006-0212Directory traversal vulnerability in OBEX Push services in T…
• CVE-2006-0213Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-2…
• CVE-2006-0214Eval injection vulnerability in ezDatabase 2.0 and earlier a…
• CVE-2006-0215Cross-site scripting (XSS) vulnerability in admin.php in Qua…
• CVE-2006-0216admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 a…
• CVE-2006-0218Multiple unspecified vulnerabilities in MyBulletinBoard (MyB…
• CVE-2006-0219The original distribution of MyBulletinBoard (MyBB) to updat…
• CVE-2006-0220Multiple cross-site scripting (XSS) vulnerabilities in DCP-P…
• CVE-2006-0221SQL injection vulnerability in index.asp in the Admin Panel …
• CVE-2006-0222Cross-site scripting (XSS) vulnerability in fullview.php in …
• CVE-2006-0223Directory traversal vulnerability in Shanghai TopCMM 123 Fla…