CVE-2006-6367

Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) iFile or (2) action parameter. NOTE: the iType parameter is already covered by CVE-2005-3976.

• CWE-89

• http://marc.info/?l=bugtraq&m=116508632603388&w=2Mailing List
• http://secunia.com/advisories/23224Vendor Advisory
• http://www.aria-security.com/forum/showthread.php?t=60Broken Link
• http://www.securityfocus.com/bid/21405Exploit, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/4845Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30669
• http://marc.info/?l=bugtraq&m=116508632603388&w=2Mailing List
• http://secunia.com/advisories/23224Vendor Advisory
• http://www.aria-security.com/forum/showthread.php?t=60Broken Link
• http://www.securityfocus.com/bid/21405Exploit, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/4845Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30669

Published

Dec 7, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6361Heap-based buffer overflow in the uploadprogress_php_rfc1867…
• CVE-2006-6362Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-6363Cross-site scripting (XSS) vulnerability in admin.pl in Blue…
• CVE-2006-6364Cross-site scripting (XSS) vulnerability in error.php in Ins…
• CVE-2006-6365SQL injection vulnerability in detail.asp in DUware DUpaypal…
• CVE-2006-6366Cross-site scripting (XSS) vulnerability in includes/element…
• CVE-2006-6368PHP remote file inclusion vulnerability in login.php.inc in …
• CVE-2006-6369SQL injection vulnerability in lib/entry_reply_entry.php in …
• CVE-2006-6370SQL injection vulnerability in forum/modules/gallery/post.ph…
• CVE-2006-6371Cross-site scripting (XSS) vulnerability in pbguestbook.php …
• CVE-2006-6372Multiple cross-site scripting (XSS) vulnerabilities in pbgue…
• CVE-2006-6373PhpMyAdmin 2.7.0-pl2 allows remote attackers to obtain sensi…