CVE-2006-2406

Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier versions, when register_globals is enabled, allows remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing null byte (%00) in the design_path parameter. NOTE: this is closely related, but a different vulnerability than the ABBC[Config][smileset] parameter.

• http://attrition.org/pipermail/vim/2006-May/000769.html
• http://newsboard.unclassified.de/forum/post/6499Patch
• http://www.osvdb.org/25494
• http://attrition.org/pipermail/vim/2006-May/000769.html
• http://newsboard.unclassified.de/forum/post/6499Patch
• http://www.osvdb.org/25494

Published

May 16, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2400The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot…
• CVE-2006-2401The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot…
• CVE-2006-2402Buffer overflow in the changeRegistration function in server…
• CVE-2006-2403Buffer overflow in FileZilla before 2.2.23 allows remote att…
• CVE-2006-2404Directory traversal vulnerability in popup.php in RadScripts…
• CVE-2006-2405Directory traversal vulnerability in unb_lib/abbc.conf.php i…
• CVE-2006-2407Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer Act…
• CVE-2006-2408Multiple buffer overflows in Raydium before SVN revision 310…
• CVE-2006-2409Format string vulnerability in the raydium_log function in c…
• CVE-2006-2410raydium_network_netcall_exec function in network.c in Raydiu…
• CVE-2006-2411Buffer overflow in raydium_network_read function in network.…
• CVE-2006-2412The raydium_network_read function in network.c in Raydium SV…