CVE-2006-2501

Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages.

• http://jvn.jp/jp/JVN%2303D5EAA8/index.htmlPatch
• http://secunia.com/advisories/20147Patch, Vendor Advisory
• http://securitytracker.com/id?1016125
• http://securitytracker.com/id?1016126
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102164-1Patch
• http://www.kb.cert.org/vuls/id/114956US Government Resource
• http://www.securityfocus.com/bid/18035
• http://www.vupen.com/english/advisories/2006/1866
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26550
• http://jvn.jp/jp/JVN%2303D5EAA8/index.htmlPatch
• http://secunia.com/advisories/20147Patch, Vendor Advisory
• http://securitytracker.com/id?1016125
• http://securitytracker.com/id?1016126
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102164-1Patch
• http://www.kb.cert.org/vuls/id/114956US Government Resource
• http://www.securityfocus.com/bid/18035
• http://www.vupen.com/english/advisories/2006/1866
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26550

Published

May 20, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2495Cross-site request forgery (CSRF) vulnerability in the Entry…
• CVE-2006-2496Buffer overflow in iMonitor 2.4 in Novell eDirectory 8.8 all…
• CVE-2006-2497Multiple cross-site scripting (XSS) vulnerabilities in AspBB…
• CVE-2006-2498Invision Power Board (IPB) before 2.1.6 allows remote attack…
• CVE-2006-2499SQL injection vulnerability in default.asp in CodeAvalanche …
• CVE-2006-2500Cross-site scripting (XSS) vulnerability in add_news.asp in …
• CVE-2006-2502Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-i…
• CVE-2006-2503SQL injection vulnerability in misc.php in DeluxeBB 1.06 all…
• CVE-2006-2504Multiple SQL injection vulnerabilities in mono AZBOARD 1.0 a…
• CVE-2006-2505Oracle Database Server 10g Release 2 allows local users to e…
• CVE-2006-2506Multiple cross-site scripting (XSS) vulnerabilities in searc…
• CVE-2006-2507Multiple PHP remote file inclusion vulnerabilities in Teake …