CVE-2006-3909

Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web script or HTML via the week parameter.

• http://secunia.com/advisories/21221Vendor Advisory
• http://www.aria-security.net/advisory/wwwthreads.txtExploit, Vendor Advisory
• http://www.osvdb.org/27542
• http://www.securityfocus.com/archive/1/441191/100/0/threaded
• http://www.securityfocus.com/bid/19177Exploit
• http://www.vupen.com/english/advisories/2006/3005
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27997
• http://secunia.com/advisories/21221Vendor Advisory
• http://www.aria-security.net/advisory/wwwthreads.txtExploit, Vendor Advisory
• http://www.osvdb.org/27542
• http://www.securityfocus.com/archive/1/441191/100/0/threaded
• http://www.securityfocus.com/bid/19177Exploit
• http://www.vupen.com/english/advisories/2006/3005
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27997

Published

Jul 27, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3903CRLF injection vulnerability in (1) index.php and (2) admin.…
• CVE-2006-3904SQL injection vulnerability in manager/index.php in Etomite …
• CVE-2006-3905SQL injection vulnerability in Webland MyBloggie 2.1.3 allow…
• CVE-2006-3906Internet Key Exchange (IKE) version 1 protocol, as implement…
• CVE-2006-3907Siemens SpeedStream 2624 allows remote attackers to cause a …
• CVE-2006-3908Format string vulnerability in the flush_output function in …
• CVE-2006-3910Internet Explorer 6 on Windows XP SP2, when Outlook is insta…
• CVE-2006-3911PHP remote file inclusion vulnerability in OSI Codes PHP Liv…
• CVE-2006-3912Stack-based buffer overflow in the SFX module in WinRAR befo…
• CVE-2006-3913Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN …
• CVE-2006-3914Cross-site scripting (XSS) vulnerability in Blackboard Acade…
• CVE-2006-3915Microsoft Internet Explorer 6 on Windows XP SP2 allows remot…