# Vulnerabilities published in 2006 - [CVE-2006-6023](https://insights.sbomify.com/CVE-2006-6023/): PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts Bloo 1.0 allows remote attackers to execute arbitrary PHP code via (high 7.5) - [CVE-2006-6022](https://insights.sbomify.com/CVE-2006-6022/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-6021](https://insights.sbomify.com/CVE-2006-6021/): SQL injection in n/a (high 7.5) - [CVE-2006-6020](https://insights.sbomify.com/CVE-2006-6020/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-6019](https://insights.sbomify.com/CVE-2006-6019/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-6018](https://insights.sbomify.com/CVE-2006-6018/): Code injection in n/a (high 7.5) - [CVE-2006-6017](https://insights.sbomify.com/CVE-2006-6017/): Denial of service in n/a (medium 6.5) - [CVE-2006-6016](https://insights.sbomify.com/CVE-2006-6016/): Information disclosure in n/a (medium 6.5) - [CVE-2006-6015](https://insights.sbomify.com/CVE-2006-6015/): Denial of service in n/a (medium 5.0) - [CVE-2006-6014](https://insights.sbomify.com/CVE-2006-6014/): Memory corruption in n/a (high 7.2) - [CVE-2006-6013](https://insights.sbomify.com/CVE-2006-6013/): Integer overflow in n/a (low 2.1) - [CVE-2006-6012](https://insights.sbomify.com/CVE-2006-6012/): Cross-site scripting in n/a (medium 4.3) - [CVE-2006-6011](https://insights.sbomify.com/CVE-2006-6011/): Denial of service in n/a (medium 5.0) - [CVE-2006-6010](https://insights.sbomify.com/CVE-2006-6010/): Information disclosure in n/a (medium 5.0) - [CVE-2006-6009](https://insights.sbomify.com/CVE-2006-6009/): Information disclosure in n/a (medium 5.0) - [CVE-2006-6008](https://insights.sbomify.com/CVE-2006-6008/): Privilege escalation in n/a (medium 6.5) - [CVE-2006-6007](https://insights.sbomify.com/CVE-2006-6007/): Missing authorization in n/a (medium 5.0) - [CVE-2006-5994](https://insights.sbomify.com/CVE-2006-5994/): Memory corruption in n/a (critical 9.3) - [CVE-2006-5991](https://insights.sbomify.com/CVE-2006-5991/): SQL injection in n/a (high 7.5) - [CVE-2006-5990](https://insights.sbomify.com/CVE-2006-5990/): Security feature bypass in n/a (medium 4.0) - [CVE-2006-5989](https://insights.sbomify.com/CVE-2006-5989/): Memory corruption in n/a (medium 5.0) - [CVE-2006-5988](https://insights.sbomify.com/CVE-2006-5988/): Denial of service in n/a (medium 5.0) - [CVE-2006-5987](https://insights.sbomify.com/CVE-2006-5987/): SQL injection in n/a (high 7.5) - [CVE-2006-5986](https://insights.sbomify.com/CVE-2006-5986/): Missing authorization in n/a (medium 6.8) - [CVE-2006-5985](https://insights.sbomify.com/CVE-2006-5985/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-5984](https://insights.sbomify.com/CVE-2006-5984/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-5983](https://insights.sbomify.com/CVE-2006-5983/): Cross-site scripting in n/a (medium 6.0) - [CVE-2006-5982](https://insights.sbomify.com/CVE-2006-5982/): Information disclosure in n/a (critical 10.0) - [CVE-2006-5981](https://insights.sbomify.com/CVE-2006-5981/): Path traversal in n/a (medium 6.4) - [CVE-2006-5980](https://insights.sbomify.com/CVE-2006-5980/): Auth bypass in n/a (critical 10.0) - [CVE-2006-5979](https://insights.sbomify.com/CVE-2006-5979/): Information disclosure in n/a (medium 5.0) - [CVE-2006-5978](https://insights.sbomify.com/CVE-2006-5978/): Unspecified vulnerability in E-Xoopport before 2.2.0 has unknown impact and attack vectors, as addressed by "Some security fix." (critical 10.0) - [CVE-2006-5977](https://insights.sbomify.com/CVE-2006-5977/): SQL injection in n/a (high 7.5) - [CVE-2006-5976](https://insights.sbomify.com/CVE-2006-5976/): SQL injection in n/a (high 7.5) - [CVE-2006-5975](https://insights.sbomify.com/CVE-2006-5975/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-5974](https://insights.sbomify.com/CVE-2006-5974/): Null dereference in n/a (high 7.8) - [CVE-2006-5973](https://insights.sbomify.com/CVE-2006-5973/): Memory corruption in n/a (medium 5.0) - [CVE-2006-5972](https://insights.sbomify.com/CVE-2006-5972/): Memory corruption in n/a (critical 10.0) - [CVE-2006-5971](https://insights.sbomify.com/CVE-2006-5971/): Path traversal in n/a (medium 5.0) - [CVE-2006-5970](https://insights.sbomify.com/CVE-2006-5970/): Information disclosure in n/a (medium 5.0) - [CVE-2006-5969](https://insights.sbomify.com/CVE-2006-5969/): Command injection in n/a (medium 4.6) - [CVE-2006-5968](https://insights.sbomify.com/CVE-2006-5968/): Privilege escalation in n/a (medium 4.6) - [CVE-2006-5967](https://insights.sbomify.com/CVE-2006-5967/): Race condition in n/a (medium 5.1) - [CVE-2006-5966](https://insights.sbomify.com/CVE-2006-5966/): Other in n/a (medium 6.4) - [CVE-2006-5965](https://insights.sbomify.com/CVE-2006-5965/): Privilege escalation in n/a (medium 4.6) - [CVE-2006-5964](https://insights.sbomify.com/CVE-2006-5964/): Denial of service in n/a (high 7.1) - [CVE-2006-5963](https://insights.sbomify.com/CVE-2006-5963/): Path traversal in n/a (medium 4.3) - [CVE-2006-5962](https://insights.sbomify.com/CVE-2006-5962/): SQL injection in n/a (high 7.5) - [CVE-2006-5961](https://insights.sbomify.com/CVE-2006-5961/): Memory corruption in n/a (high 7.5) - [CVE-2006-5960](https://insights.sbomify.com/CVE-2006-5960/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-5959](https://insights.sbomify.com/CVE-2006-5959/): SQL injection in n/a (high 7.5) - [CVE-2006-5958](https://insights.sbomify.com/CVE-2006-5958/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-5957](https://insights.sbomify.com/CVE-2006-5957/): SQL injection in n/a (high 7.5) - [CVE-2006-5956](https://insights.sbomify.com/CVE-2006-5956/): Information disclosure in n/a (low 2.1) - [CVE-2006-5955](https://insights.sbomify.com/CVE-2006-5955/): SQL injection in n/a (high 7.5) - [CVE-2006-5954](https://insights.sbomify.com/CVE-2006-5954/): SQL injection in n/a (high 7.5) - [CVE-2006-5953](https://insights.sbomify.com/CVE-2006-5953/): SQL injection in n/a (high 7.5) - [CVE-2006-5952](https://insights.sbomify.com/CVE-2006-5952/): SQL injection in n/a (high 7.5) - [CVE-2006-5951](https://insights.sbomify.com/CVE-2006-5951/): Code injection in n/a (high 7.5) - [CVE-2006-5950](https://insights.sbomify.com/CVE-2006-5950/): Information disclosure in n/a (medium 5.0) - [CVE-2006-5949](https://insights.sbomify.com/CVE-2006-5949/): Path traversal in n/a (medium 5.0) - [CVE-2006-5948](https://insights.sbomify.com/CVE-2006-5948/): Code injection in n/a (high 7.5) - [CVE-2006-5947](https://insights.sbomify.com/CVE-2006-5947/): Path traversal in n/a (medium 5.0) - [CVE-2006-5946](https://insights.sbomify.com/CVE-2006-5946/): SQL injection in n/a (high 7.5) - [CVE-2006-5945](https://insights.sbomify.com/CVE-2006-5945/): SQL injection in n/a (high 7.5) - [CVE-2006-5944](https://insights.sbomify.com/CVE-2006-5944/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-5943](https://insights.sbomify.com/CVE-2006-5943/): SQL injection in n/a (high 7.5) - [CVE-2006-5942](https://insights.sbomify.com/CVE-2006-5942/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-5940](https://insights.sbomify.com/CVE-2006-5940/): Integer overflow in n/a (critical 10.0) - [CVE-2006-5939](https://insights.sbomify.com/CVE-2006-5939/): Denial of service in n/a (high 7.8) - [CVE-2006-5938](https://insights.sbomify.com/CVE-2006-5938/): Memory corruption in n/a (critical 10.0) - [CVE-2006-5937](https://insights.sbomify.com/CVE-2006-5937/): Integer overflow in n/a (high 7.5) - [CVE-2006-5936](https://insights.sbomify.com/CVE-2006-5936/): SQL injection in n/a (high 7.5) - [CVE-2006-5935](https://insights.sbomify.com/CVE-2006-5935/): SQL injection in n/a (high 7.5) - [CVE-2006-5934](https://insights.sbomify.com/CVE-2006-5934/): SQL injection in n/a (high 7.5) - [CVE-2006-5933](https://insights.sbomify.com/CVE-2006-5933/): SQL injection in n/a (high 7.5) - [CVE-2006-5932](https://insights.sbomify.com/CVE-2006-5932/): Missing authorization in n/a (high 7.5) - [CVE-2006-5931](https://insights.sbomify.com/CVE-2006-5931/): File upload in n/a (medium 5.1) - [CVE-2006-5930](https://insights.sbomify.com/CVE-2006-5930/): Code injection in n/a (high 7.5) - [CVE-2006-5929](https://insights.sbomify.com/CVE-2006-5929/): Code injection in n/a (high 7.5) - [CVE-2006-5928](https://insights.sbomify.com/CVE-2006-5928/): Code injection in n/a (high 7.5) - [CVE-2006-5927](https://insights.sbomify.com/CVE-2006-5927/): SQL injection in n/a (high 7.5) - [CVE-2006-5926](https://insights.sbomify.com/CVE-2006-5926/): SQL injection in n/a (high 7.5) - [CVE-2006-5925](https://insights.sbomify.com/CVE-2006-5925/): Command injection in n/a (high 7.5) - [CVE-2006-5924](https://insights.sbomify.com/CVE-2006-5924/): Cross-site scripting in n/a (medium 5.8) - [CVE-2006-5923](https://insights.sbomify.com/CVE-2006-5923/): Code injection in n/a (high 7.5) - [CVE-2006-5922](https://insights.sbomify.com/CVE-2006-5922/): Information disclosure in n/a (medium 5.0) - [CVE-2006-5921](https://insights.sbomify.com/CVE-2006-5921/): Cross-site scripting in n/a (medium 5.8) - [CVE-2006-5920](https://insights.sbomify.com/CVE-2006-5920/): Code injection in n/a (high 7.5) - [CVE-2006-5919](https://insights.sbomify.com/CVE-2006-5919/): Code injection in n/a (high 7.5) - [CVE-2006-5918](https://insights.sbomify.com/CVE-2006-5918/): File upload in n/a (high 7.5) - [CVE-2006-5917](https://insights.sbomify.com/CVE-2006-5917/): SQL injection in n/a (high 7.5) - [CVE-2006-5916](https://insights.sbomify.com/CVE-2006-5916/): Security feature bypass in n/a (medium 5.0) - [CVE-2006-5915](https://insights.sbomify.com/CVE-2006-5915/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-5914](https://insights.sbomify.com/CVE-2006-5914/): SQL injection in n/a (high 7.5) - [CVE-2006-5913](https://insights.sbomify.com/CVE-2006-5913/): Security feature bypass in n/a (medium 6.4) - [CVE-2006-5912](https://insights.sbomify.com/CVE-2006-5912/): Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Security fix for you-know-w (critical 10.0) - [CVE-2006-5911](https://insights.sbomify.com/CVE-2006-5911/): File upload in n/a (high 7.5) - [CVE-2006-5910](https://insights.sbomify.com/CVE-2006-5910/): Code injection in n/a (high 7.5) - [CVE-2006-5909](https://insights.sbomify.com/CVE-2006-5909/): Missing authorization in n/a (medium 5.0) --- From sbomify Insights: https://insights.sbomify.com/years/2006/page/13/