CVE-2006-1064

Multiple cross-site scripting (XSS) vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

• http://secunia.com/advisories/19136Patch, Vendor Advisory
• http://secunia.com/advisories/19145
• http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168Patch
• http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.htmlVendor Advisory
• http://www.debian.org/security/2006/dsa-999
• http://www.osvdb.org/23696
• http://www.securityfocus.com/bid/17003
• http://www.vupen.com/english/advisories/2006/0850
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25154
• http://secunia.com/advisories/19136Patch, Vendor Advisory
• http://secunia.com/advisories/19145
• http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168Patch
• http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.htmlVendor Advisory
• http://www.debian.org/security/2006/dsa-999
• http://www.osvdb.org/23696
• http://www.securityfocus.com/bid/17003
• http://www.vupen.com/english/advisories/2006/0850
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25154

Published

Mar 7, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1058BusyBox 1.1.1 does not use a salt when generating passwords,…5.5
• CVE-2006-1059The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the ma…
• CVE-2006-1060Heap-based buffer overflow in zgv before 5.8 and xzgv before…
• CVE-2006-1061Heap-based buffer overflow in cURL and libcURL 7.15.0 throug…
• CVE-2006-1062Unspecified vulnerability in lurker.cgi for Lurker 2.0 and e…
• CVE-2006-1063Unspecified vulnerability in Lurker 2.0 and earlier allows r…
• CVE-2006-1065SQL injection vulnerability in search.php in MyBulletinBoard…
• CVE-2006-1066Linux kernel 2.6.16-rc2 and earlier, when running on x86_64 …
• CVE-2006-1067Linksys WRT54G routers version 5 (running VXWorks) allow rem…
• CVE-2006-1068Netgear 614 and 624 routers, possibly running VXWorks, allow…
• CVE-2006-1069Unspecified vulnerability in the session handling for Geeklo…
• CVE-2006-1070Cross-site scripting (XSS) vulnerability in dv_gbook.php in …