CVE-2006-6094

Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the (1) catID parameter to activeNews_categories.asp, the (2) articleID parameter to activeNews_comments.asp, or the (3) query parameter to activenews_search.asp.

• CWE-89

• http://marc.info/?l=bugtraq&m=116388432326444&w=2Mailing List
• http://s-a-p.ca/index.php?page=OurAdvisories&id=31Broken Link, Exploit, Vendor Advisory, URL Repurposed
• http://secunia.com/advisories/22981Vendor Advisory
• http://securityreason.com/securityalert/1910Third Party Advisory
• http://www.aria-security.com/forum/showthread.php?t=33Broken Link
• http://www.osvdb.org/30518Broken Link
• http://www.osvdb.org/30519Broken Link
• http://www.osvdb.org/30520Broken Link
• http://www.securityfocus.com/archive/1/451884/100/100/threaded
• http://www.securityfocus.com/archive/1/452015Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/21167Exploit, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/4600Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30352
• http://marc.info/?l=bugtraq&m=116388432326444&w=2Mailing List
• http://s-a-p.ca/index.php?page=OurAdvisories&id=31Broken Link, Exploit, Vendor Advisory, URL Repurposed
• http://secunia.com/advisories/22981Vendor Advisory
• http://securityreason.com/securityalert/1910Third Party Advisory
• http://www.aria-security.com/forum/showthread.php?t=33Broken Link
• http://www.osvdb.org/30518Broken Link
• http://www.osvdb.org/30519Broken Link
• http://www.osvdb.org/30520Broken Link
• http://www.securityfocus.com/archive/1/451884/100/100/threaded
• http://www.securityfocus.com/archive/1/452015Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/21167Exploit, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/4600Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30352

Published

Nov 24, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6088Multiple cross-site scripting (XSS) vulnerabilities in BlueC…
• CVE-2006-6089Multiple cross-site scripting (XSS) vulnerabilities in addpo…
• CVE-2006-6090Multiple SQL injection vulnerabilities in BaalAsp forum allo…
• CVE-2006-6091Cross-site scripting (XSS) vulnerability in Grim Pirate Grim…
• CVE-2006-6092Multiple SQL injection vulnerabilities in vehiclelistings.as…
• CVE-2006-6093Multiple PHP remote file inclusion vulnerabilities in adminp…
• CVE-2006-6095Multiple SQL injection vulnerabilities in ActiveNews Manager…
• CVE-2006-6096Cross-site scripting (XSS) vulnerability in activenews_searc…
• CVE-2006-6097GNU tar 1.16 and 1.15.1, and possibly other versions, allows…
• CVE-2006-6098Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-6099Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-6100Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…