CVE-2006-1900

Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code via a long value in (1) the COMPACT attribute of the COLGROUP element, (2) the ROWS attribute of the TEXTAREA element, and (3) the COLOR attribute of the LEGEND element; and via other unspecified attack vectors consisting of "dozens of possible snippets."

• http://morph3us.org/advisories/20060412-amaya-94-2.txtExploit, Vendor Advisory
• http://morph3us.org/advisories/20060412-amaya-94.txtExploit, Vendor Advisory
• http://secunia.com/advisories/19670Patch, Vendor Advisory
• http://www.osvdb.org/24623Patch
• http://www.osvdb.org/24624Patch
• http://www.securityfocus.com/archive/1/430877/100/0/threaded
• http://www.securityfocus.com/archive/1/430879/100/0/threaded
• http://www.securityfocus.com/bid/17507Exploit
• http://www.vupen.com/english/advisories/2006/1351
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25791
• http://morph3us.org/advisories/20060412-amaya-94-2.txtExploit, Vendor Advisory
• http://morph3us.org/advisories/20060412-amaya-94.txtExploit, Vendor Advisory
• http://secunia.com/advisories/19670Patch, Vendor Advisory
• http://www.osvdb.org/24623Patch
• http://www.osvdb.org/24624Patch
• http://www.securityfocus.com/archive/1/430877/100/0/threaded
• http://www.securityfocus.com/archive/1/430879/100/0/threaded
• http://www.securityfocus.com/bid/17507Exploit
• http://www.vupen.com/english/advisories/2006/1351
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25791

Published

Apr 20, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1894Cross-site scripting (XSS) vulnerability in RevoBoard 1.8, a…
• CVE-2006-1895Direct static code injection vulnerability in includes/templ…
• CVE-2006-1896Unspecified vulnerability in phpBB allows remote authenticat…
• CVE-2006-1897Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL f…
• CVE-2006-1898Multiple cross-site scripting (XSS) vulnerabilities in Ralph…
• CVE-2006-1899Multiple cross-site scripting (XSS) vulnerabilities in dev N…
• CVE-2006-1901Mozilla Camino 1.0 and earlier allow remote attackers to cau…
• CVE-2006-1902fold_binary in fold-const.c in GNU Compiler Collection (gcc)…
• CVE-2006-1903Multiple cross-site scripting (XSS) vulnerabilities in UserL…
• CVE-2006-1904Cross-site scripting (XSS) vulnerability in index.php in Ani…
• CVE-2006-1905Multiple format string vulnerabilities in xiTK (xitk/main.c)…
• CVE-2006-1906Cross-site scripting (XSS) vulnerability in index.php in jjg…