2006 CVE Vulnerabilities

7,145 CVEs published in 2006.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2006-1850——Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitr...
CVE-2006-1851——xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the (1) acti...
CVE-2006-1852——SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execut...
CVE-2006-1853——Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execu...
CVE-2006-1854——Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject ...
CVE-2006-1845——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-0537. Reason: This candidate is a duplicate of...
CVE-2006-1753——A cron job in fcheck before 2.7.59 allows local users to overwrite arbitrary files via a symlink attack on a temporary f...
CVE-2006-1827——Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary cod...
CVE-2006-1824——Multiple cross-site scripting (XSS) vulnerabilities in PhpGuestbook.php in PhpGuestbook 1.0 allow remote attackers to in...
CVE-2006-1823——Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation ...
CVE-2006-1822——Cross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows remote attackers to inj...
CVE-2006-1821——Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. (d...
CVE-2006-1820——Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web scri...
CVE-2006-1819——Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote...
CVE-2006-1818——Multiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary web ...
CVE-2006-1817——SQL injection vulnerability in authcheck.php in warforge.NEWS 1.0, with magic_quotes_gpc disabled, allows remote attacke...
CVE-2006-1815——Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote...
CVE-2006-1814——NetBSD 1.6, 2.0, 2.1 and 3.0 allows local users to cause a denial of service (memory exhaustion) by using the sysctl sys...
CVE-2006-1813——Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote attackers to read arbitrary fi...
CVE-2006-1812——phpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient access control, which allows re...
CVE-2006-1811——Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL commands via...
CVE-2006-1810——Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web ...
CVE-2006-1809——index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which...
CVE-2006-1808——Cross-site scripting (XSS) vulnerability in index.php in Lifetype 1.0.3 allows remote attackers to inject arbitrary web ...
CVE-2006-1807——Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbi...

Check if your code is affected by 2006 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now