CVE-2006-3940

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1) the ar parameter in auction_room.php and (2) the u parameter in auction_store.php. NOTE: the auction_rating.php vector is already covered by CVE-2005-1234. NOTE: the original disclosure states that the product name is "PHP-Auction", but this is probably an error.

• http://securityreason.com/securityalert/1306
• http://www.aria-security.net/advisory/phpauction.txtExploit
• http://www.securityfocus.com/archive/1/441190/100/0/threaded
• http://www.securityfocus.com/bid/19179
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28006
• http://securityreason.com/securityalert/1306
• http://www.aria-security.net/advisory/phpauction.txtExploit
• http://www.securityfocus.com/archive/1/441190/100/0/threaded
• http://www.securityfocus.com/bid/19179
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28006

Published

Jul 31, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3934Absolute path traversal vulnerability in downloadTrigger.jsp…
• CVE-2006-3935system/workplace/views/admin/admin-main.jsp in Alkacon OpenC…
• CVE-2006-3936system/workplace/editors/editor.jsp in Alkacon OpenCms befor…
• CVE-2006-3937post.php in x_atrix xGuestBook 1.02 allows remote attackers …
• CVE-2006-3938DotClear allows remote attackers to obtain sensitive informa…
• CVE-2006-3939ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to …
• CVE-2006-3941Unspecified vulnerability in the daemons for Sun N1 Grid Eng…
• CVE-2006-3942The server driver (srv.sys) in Microsoft Windows NT 4.0, 200…
• CVE-2006-3943Stack-based buffer overflow in NDFXArtEffects in Microsoft I…
• CVE-2006-3944Microsoft Internet Explorer 6 on Windows XP SP2 allows remot…
• CVE-2006-3945The CSS functionality in Opera 9 on Windows XP SP2 allows re…
• CVE-2006-3946WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 all…