2006 CVE Vulnerabilities
7,145 CVEs published in 2006.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2006-4890 | — | — | 8.4% | Sep 19, 2006 | Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitra... |
| CVE-2006-4891 | — | — | 2.6% | Sep 19, 2006 | SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows r... |
| CVE-2006-4893 | — | — | 3.1% | Sep 19, 2006 | PHP remote file inclusion vulnerability in bb_usage_stats/includes/bb_usage_stats.php in phpBB XS 0.58 and earlier allow... |
| CVE-2006-4894 | — | — | 3.9% | Sep 19, 2006 | Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows rem... |
| CVE-2006-4895 | — | — | 2.5% | Sep 19, 2006 | IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id paramet... |
| CVE-2006-4897 | — | — | 7.8% | Sep 19, 2006 | CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, whic... |
| CVE-2006-3866 | — | — | — | Sep 19, 2006 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-4868. Reason: This candidate is a duplicate of... |
| CVE-2006-4334 | — | — | 3.9% | Sep 19, 2006 | Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a cr... |
| CVE-2006-2191 | — | — | 2.5% | Sep 19, 2006 | Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. ... |
| CVE-2006-4335 | — | — | 5.5% | Sep 19, 2006 | Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running o... |
| CVE-2006-4337 | — | — | 5.6% | Sep 19, 2006 | Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to exec... |
| CVE-2006-4336 | — | — | 5.5% | Sep 19, 2006 | Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbi... |
| CVE-2006-4338 | — | — | 3.6% | Sep 19, 2006 | unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loo... |
| CVE-2006-4872 | — | — | 2.6% | Sep 19, 2006 | SQL injection vulnerability in search.asp in Keyvan1 (aka Keyvan Janghorbani) ECardPro 2.0 allows remote attackers to ex... |
| CVE-2006-4874 | — | — | 3.4% | Sep 19, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script... |
| CVE-2006-4871 | — | — | 2.6% | Sep 19, 2006 | SQL injection vulnerability in search_run.asp in Keyvan1 (aka Keyvan Janghorbani) EShoppingPro 1.0 allows remote attacke... |
| CVE-2006-4875 | — | — | 6.6% | Sep 19, 2006 | Unrestricted file upload vulnerability in modules/galleryuploadfunction.php in Jupiter CMS allows remote attackers to up... |
| CVE-2006-4873 | — | — | 2.0% | Sep 19, 2006 | Jupiter CMS allows remote attackers to obtain sensitive information via a direct request for (1) includes/functions.php,... |
| CVE-2006-4876 | — | — | 2.2% | Sep 19, 2006 | Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via (1) t... |
| CVE-2006-4877 | — | — | 8.6% | Sep 19, 2006 | Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite a... |
| CVE-2006-4878 | — | — | 5.8% | Sep 19, 2006 | Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers... |
| CVE-2006-4879 | — | — | 1.9% | Sep 19, 2006 | SQL injection vulnerability in profile.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to e... |
| CVE-2006-4880 | — | — | 2.3% | Sep 19, 2006 | David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to obtain sensitive information via a direct reque... |
| CVE-2006-4881 | — | — | 4.5% | Sep 19, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in David Bennett PHP-Post (PHPp) 1.0 and earlier allow remote attack... |
| CVE-2006-4882 | — | — | 2.6% | Sep 19, 2006 | SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary S... |
Check if your code is affected by 2006 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now