CVE-2006-1547

ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.

• CWE-749

• http://issues.apache.org/bugzilla/show_bug.cgi?id=38534Issue Tracking, Permissions Required
• http://lists.suse.com/archive/suse-security-announce/2006-May/0004.htmlBroken Link
• http://secunia.com/advisories/19493Broken Link
• http://secunia.com/advisories/20117Broken Link
• http://securitytracker.com/id?1015856Broken Link, Third Party Advisory, VDB Entry
• http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.htmlBroken Link, Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/17342Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/1205Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25613Third Party Advisory, VDB Entry
• http://issues.apache.org/bugzilla/show_bug.cgi?id=38534Issue Tracking, Permissions Required
• http://lists.suse.com/archive/suse-security-announce/2006-May/0004.htmlBroken Link
• http://secunia.com/advisories/19493Broken Link
• http://secunia.com/advisories/20117Broken Link
• http://securitytracker.com/id?1015856Broken Link, Third Party Advisory, VDB Entry
• http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.htmlBroken Link, Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/17342Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/1205Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25613Third Party Advisory, VDB Entry
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2006-1547US Government Resource

Published

Mar 30, 2006

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1541SQL injection vulnerability in Default.asp in EzASPSite 2.0 …
• CVE-2006-1542Stack-based buffer overflow in Python 2.4.2 and earlier, run…
• CVE-2006-1543Multiple SQL injection vulnerabilities in vscripts (aka Kuba…
• CVE-2006-1544Multiple cross-site scripting (XSS) vulnerabilities in news.…
• CVE-2006-1545Direct static code injection vulnerability in admin/config.p…
• CVE-2006-1546Apache Software Foundation (ASF) Struts before 1.2.9 allows …
• CVE-2006-1548Cross-site scripting (XSS) vulnerability in (1) LookupDispat…
• CVE-2006-1549PHP 4.4.2 and 5.1.2 allows local users to cause a crash (seg…
• CVE-2006-1550Multiple buffer overflows in the xfig import code (xfig-impo…
• CVE-2006-1551Eval injection vulnerability in pajax_call_dispatcher.php in…
• CVE-2006-1552Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.…
• CVE-2006-1553SQL injection vulnerability in functions/final_functions.php…