CVE-2006-5258

The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked.

• CWE-94

• http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html
• http://editor.asbrusoft.com/page.php/id=727
• http://secunia.com/advisories/22344Patch, Vendor Advisory
• http://secunia.com/advisories/22353
• http://secunia.com/advisories/22472Vendor Advisory
• http://wcm.asbrusoft.com/page.php/id=791Patch
• http://www.securityfocus.com/bid/20544
• http://www.vupen.com/english/advisories/2006/4004Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4060Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4061Vendor Advisory
• http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html
• http://editor.asbrusoft.com/page.php/id=727
• http://secunia.com/advisories/22344Patch, Vendor Advisory
• http://secunia.com/advisories/22353
• http://secunia.com/advisories/22472Vendor Advisory
• http://wcm.asbrusoft.com/page.php/id=791Patch
• http://www.securityfocus.com/bid/20544
• http://www.vupen.com/english/advisories/2006/4004Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4060Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4061Vendor Advisory

Published

Oct 12, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5252PHP remote file inclusion vulnerability in includes/core.lib…
• CVE-2006-5253PHP remote file inclusion vulnerability in strload.php in Da…
• CVE-2006-5254PHP remote file inclusion vulnerability in registration_deta…
• CVE-2006-5255PHP remote file inclusion vulnerability in addnews.php in Gr…
• CVE-2006-5256PHP remote file inclusion vulnerability in claroline/inc/lib…
• CVE-2006-5257PHP remote file inclusion vulnerability in modules/forum/inc…
• CVE-2006-5259PHP remote file inclusion vulnerability in param_editor.php …
• CVE-2006-5260PHP remote file inclusion vulnerability in compteur.php in C…
• CVE-2006-5261Multiple PHP remote file inclusion vulnerabilities in PHPMyN…
• CVE-2006-5262CRLF injection vulnerability in lib/session.php in Hastymail…
• CVE-2006-5263Directory traversal vulnerability in templates/header.php3 i…
• CVE-2006-5264Cross-site scripting (XSS) vulnerability in sql.php in Mysql…