CVE-2006-2641

** UNVERIFIABLE ** NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting (XSS) vulnerability in John Frank Asset Manager (AssetMan) 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure is based on vague researcher claims without vendor acknowledgement; therefore this identifier cannot be linked with any future identifier that identifies more specific vectors. Perhaps this should not be included in CVE.

• http://secunia.com/advisories/20285Vendor Advisory
• http://securityreason.com/securityalert/979
• http://www.securityfocus.com/archive/1/435139/100/0/threaded
• http://www.securityfocus.com/bid/18131
• http://www.vupen.com/english/advisories/2006/2023
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26702
• http://secunia.com/advisories/20285Vendor Advisory
• http://securityreason.com/securityalert/979
• http://www.securityfocus.com/archive/1/435139/100/0/threaded
• http://www.securityfocus.com/bid/18131
• http://www.vupen.com/english/advisories/2006/2023
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26702

Published

May 30, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2635Multiple cross-site scripting (XSS) vulnerabilities in Tikiw…
• CVE-2006-2636newsadmin.asp in Katy Whitton NewsCMSLite allows remote atta…
• CVE-2006-2637Cross-site scripting (XSS) vulnerability in view.php in Tutt…
• CVE-2006-2638SQL injection vulnerability in member.asp in qjForum allows …
• CVE-2006-2639Cross-site scripting (XSS) vulnerability in the input forms …
• CVE-2006-2640Cross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in…
• CVE-2006-2642** UNVERIFIABLE ** NOTE: this issue does not contain any ve…
• CVE-2006-2643Cross-site scripting (XSS) vulnerability in index.php in Mon…
• CVE-2006-2644AWStats 6.5, and possibly other versions, allows remote auth…
• CVE-2006-2645PHP remote file inclusion vulnerability in manager/frontinc/…
• CVE-2006-2646Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier…
• CVE-2006-2647Untrusted search path vulnerability in update_flash for IBM …