CVE-2006-6597

Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands via the /r option in a telnet:// URI, which is configured to use hawin32.exe.

• CWE-88

• http://secunia.com/advisories/23366Broken Link, Vendor Advisory
• http://securityreason.com/securityalert/2045Third Party Advisory
• http://www.securityfocus.com/archive/1/454388/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/21594Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/5013Broken Link
• http://secunia.com/advisories/23366Broken Link, Vendor Advisory
• http://securityreason.com/securityalert/2045Third Party Advisory
• http://www.securityfocus.com/archive/1/454388/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/21594Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/5013Broken Link

Published

Dec 15, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6591PHP remote file inclusion vulnerability in fonctions/templat…
• CVE-2006-6592Multiple PHP remote file inclusion vulnerabilities in Bloq 0…
• CVE-2006-6593PHP remote file inclusion vulnerability in zufallscodepart.p…
• CVE-2006-6594SQL injection vulnerability in utilities/usermessages.asp in…
• CVE-2006-6595Multiple SQL injection vulnerabilities in ScriptMate User Ma…
• CVE-2006-6596HyperAccess 8.4 allows user-assisted remote attackers to exe…
• CVE-2006-6598Directory traversal vulnerability in viewnfo.php in (1) Torr…
• CVE-2006-6599maketorrent.php in TorrentFlux 2.2 allows remote authenticat…
• CVE-2006-6600Cross-site scripting (XSS) vulnerability in dir.php in Torre…
• CVE-2006-6601Windows Media Player 10.00.00.4036 in Microsoft Windows XP S…
• CVE-2006-6602explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft…
• CVE-2006-6603Buffer overflow in the YMMAPI.YMailAttach ActiveX control (y…