CVE-2006-6066

Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) admin_login.asp, the (3) ID parameter to (b) event_searchdetail.asp, or the (4) VenueID parameter to (c) venue_detail.asp.

• http://s-a-p.ca/index.php?page=OurAdvisories&id=32Exploit, Vendor Advisory, URL Repurposed
• http://secunia.com/advisories/22930Vendor Advisory
• http://www.osvdb.org/30443
• http://www.osvdb.org/30444
• http://www.osvdb.org/30445
• http://www.securityfocus.com/archive/1/451632/100/100/threaded
• http://www.securityfocus.com/bid/21098Exploit
• http://www.vupen.com/english/advisories/2006/4533
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30296
• http://s-a-p.ca/index.php?page=OurAdvisories&id=32Exploit, Vendor Advisory, URL Repurposed
• http://secunia.com/advisories/22930Vendor Advisory
• http://www.osvdb.org/30443
• http://www.osvdb.org/30444
• http://www.osvdb.org/30445
• http://www.securityfocus.com/archive/1/451632/100/100/threaded
• http://www.securityfocus.com/bid/21098Exploit
• http://www.vupen.com/english/advisories/2006/4533
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30296

Published

Nov 22, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6060The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18,…
• CVE-2006-6061com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8,…
• CVE-2006-6062Unspecified vulnerability in Apple Mac OS X 10.4.8, and poss…
• CVE-2006-6063Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and ea…
• CVE-2006-6064Multiple buffer overflows in the Message Parsing Interpreter…
• CVE-2006-6065PHP remote file inclusion vulnerability in includes/mx_commo…
• CVE-2006-6067Multiple SQL injection vulnerabilities in 20/20 DataShed (ak…
• CVE-2006-6068Directory traversal vulnerability in the cached_album functi…
• CVE-2006-6069index.php in mAlbum 0.3 and earlier allows remote attackers …
• CVE-2006-6070SQL injection vulnerability in module/account/register/regis…
• CVE-2006-6071TWiki 4.0.5 and earlier, when running under Apache 1.3 using…
• CVE-2006-6072SQL injection vulnerability in bpg/publications_list.asp in …