2006 CVE Vulnerabilities

7,145 CVEs published in 2006.

CVE IDSeverityCVSSDescription
CVE-2006-3206——register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the ...
CVE-2006-3205——Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, power...
CVE-2006-2918——The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of ...
CVE-2006-3199——Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL cont...
CVE-2006-2915——Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the...
CVE-2006-3202——The ip6_savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapp...
CVE-2006-3198——Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large...
CVE-2006-3201——Unspecified vulnerability in the kernel in HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecifie...
CVE-2006-3200——Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service (crash) via an IFRAME with...
CVE-2006-2914——PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in ...
CVE-2006-3085——xt_sctp in netfilter for Linux kernel before 2.6.17.1 allows attackers to cause a denial of service (infinite loop) via ...
CVE-2006-2445——Race condition in run_posix_cpu_timers in Linux kernel before 2.6.16.21 allows local users to cause a denial of service ...
CVE-2006-2448——Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, w...
CVE-2006-3171——CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a new...
CVE-2006-3197——Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inje...
CVE-2006-3192——PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via ...
CVE-2006-3168——SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (1...
CVE-2006-3169——Multiple cross-site scripting (XSS) vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitr...
CVE-2006-3170——CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly inv...
CVE-2006-3191——Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web scri...
CVE-2006-3190——SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0 allows remote attackers to exec...
CVE-2006-3189——Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in HotPlug CMS 1.0 allows remote attack...
CVE-2006-3195——Cross-site scripting (XSS) vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject ...
CVE-2006-3188——Multiple SQL injection vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to execute arbitrary SQL...
CVE-2006-3187——Multiple cross-site scripting (XSS) vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to inject a...

Check if your code is affected by 2006 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now