CVE-2006-1000

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) newsid parameter to newsdetailsview.asp and (2) password parameter to login.asp.

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042524.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042525.html
• http://secunia.com/advisories/19024Exploit, Vendor Advisory
• http://securitytracker.com/id?1015682Exploit, Vendor Advisory
• http://www.nukedx.com/?viewdoc=13Exploit, Vendor Advisory
• http://www.nukedx.com/?viewdoc=14Exploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/426074/100/0/threaded
• http://www.securityfocus.com/archive/1/426075/100/0/threaded
• http://www.securityfocus.com/bid/16818Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/0749
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042524.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042525.html
• http://secunia.com/advisories/19024Exploit, Vendor Advisory
• http://securitytracker.com/id?1015682Exploit, Vendor Advisory
• http://www.nukedx.com/?viewdoc=13Exploit, Vendor Advisory
• http://www.nukedx.com/?viewdoc=14Exploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/426074/100/0/threaded
• http://www.securityfocus.com/archive/1/426075/100/0/threaded
• http://www.securityfocus.com/bid/16818Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/0749

Published

Mar 6, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0994Multiple Sophos Anti-Virus products, including Anti-Virus fo…
• CVE-2006-0995EMC Dantz Retrospect 7 backup client 7.0.107, and other vers…
• CVE-2006-0996Cross-site scripting (XSS) vulnerability in phpinfo (info.c)…
• CVE-2006-0997The SSL server implementation in NILE.NLM in Novell NetWare …
• CVE-2006-0998The SSL server implementation in NILE.NLM in Novell NetWare …
• CVE-2006-0999The SSL server implementation in NILE.NLM in Novell NetWare …
• CVE-2006-10001A vulnerability, which was classified as problematic, was fo…5.4
• CVE-2006-10002XML::Parser versions through 2.45 for Perl could overflow th…7.5
• CVE-2006-10003XML::Parser versions through 2.47 for Perl has an off-by-one…9.8
• CVE-2006-1001SQL injection vulnerability in the board module in LanSuite …
• CVE-2006-1002NETGEAR WGT624 Wireless DSL router has a default account of …
• CVE-2006-1003The backup configuration option in NETGEAR WGT624 Wireless F…