CVE-2006-3695

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.

• http://secunia.com/advisories/20958Vendor Advisory
• http://secunia.com/advisories/21534Vendor Advisory
• http://securitytracker.com/id?1016457
• http://trac.edgewall.org/wiki/ChangeLog
• http://www.debian.org/security/2006/dsa-1152
• http://www.securityfocus.com/bid/18323
• http://www.vupen.com/english/advisories/2006/2729Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27706
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27708
• http://secunia.com/advisories/20958Vendor Advisory
• http://secunia.com/advisories/21534Vendor Advisory
• http://securitytracker.com/id?1016457
• http://trac.edgewall.org/wiki/ChangeLog
• http://www.debian.org/security/2006/dsa-1152
• http://www.securityfocus.com/bid/18323
• http://www.vupen.com/english/advisories/2006/2729Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27706
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27708

Published

Jul 21, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3689PHP remote file inclusion vulnerability in user-func.php in …
• CVE-2006-3690Multiple PHP remote file inclusion vulnerabilities in MiniBB…
• CVE-2006-3691Multiple SQL injection vulnerabilities in VBZooM 1.11 and ea…
• CVE-2006-3692PHP remote file inclusion vulnerability in enduser/listmesse…
• CVE-2006-3693Rocks Clusters 4.1 and earlier allows local users to gain pr…
• CVE-2006-3694Multiple unspecified vulnerabilities in Ruby before 1.8.5 al…
• CVE-2006-3696filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462…
• CVE-2006-3697Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in…
• CVE-2006-3698Multiple unspecified vulnerabilities in Oracle Database 10.1…
• CVE-2006-3699Unspecified vulnerability in the Core RDBMS component in Ora…
• CVE-2006-3700Multiple unspecified vulnerabilities in Oracle Database 9.2.…
• CVE-2006-3701Unspecified vulnerability in the Dictionary component in Ora…