# Vulnerabilities published in 2006


- [CVE-2006-4973](https://insights.sbomify.com/CVE-2006-4973/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2006-4972](https://insights.sbomify.com/CVE-2006-4972/): Cross-site scripting in n/a (medium 5.1)
- [CVE-2006-4971](https://insights.sbomify.com/CVE-2006-4971/): Information disclosure in n/a (medium 5.0)
- [CVE-2006-4970](https://insights.sbomify.com/CVE-2006-4970/): Code injection in n/a (high 7.5)
- [CVE-2006-4969](https://insights.sbomify.com/CVE-2006-4969/): Code injection in n/a (high 7.5)
- [CVE-2006-4968](https://insights.sbomify.com/CVE-2006-4968/): Code injection in n/a (high 7.5)
- [CVE-2006-4967](https://insights.sbomify.com/CVE-2006-4967/): Cross-site scripting in n/a (medium 6.8)
- [CVE-2006-4966](https://insights.sbomify.com/CVE-2006-4966/): Code injection in n/a (high 7.5)
- [CVE-2006-4965](https://insights.sbomify.com/CVE-2006-4965/): Code injection in n/a (medium 5.0)
- [CVE-2006-4964](https://insights.sbomify.com/CVE-2006-4964/): Cross-site scripting in n/a (medium 6.8)
- [CVE-2006-4963](https://insights.sbomify.com/CVE-2006-4963/): Path traversal in n/a (medium 6.4)
- [CVE-2006-4962](https://insights.sbomify.com/CVE-2006-4962/): Path traversal in n/a (medium 6.4)
- [CVE-2006-4961](https://insights.sbomify.com/CVE-2006-4961/): SQL injection in n/a (high 7.5)
- [CVE-2006-4960](https://insights.sbomify.com/CVE-2006-4960/): Cross-site scripting in n/a (medium 6.8)
- [CVE-2006-4959](https://insights.sbomify.com/CVE-2006-4959/): Information disclosure in n/a (medium 5.0)
- [CVE-2006-4958](https://insights.sbomify.com/CVE-2006-4958/): Cross-site scripting in n/a (medium 6.8)
- [CVE-2006-4957](https://insights.sbomify.com/CVE-2006-4957/): SQL injection in n/a (high 7.5)
- [CVE-2006-4956](https://insights.sbomify.com/CVE-2006-4956/): Cross-site scripting in n/a (medium 6.8)
- [CVE-2006-4955](https://insights.sbomify.com/CVE-2006-4955/): Path traversal in n/a (medium 5.0)
- [CVE-2006-4954](https://insights.sbomify.com/CVE-2006-4954/): Missing authorization in n/a (high 7.5)
- [CVE-2006-4953](https://insights.sbomify.com/CVE-2006-4953/): SQL injection in n/a (high 7.5)
- [CVE-2006-4952](https://insights.sbomify.com/CVE-2006-4952/): Missing authorization in n/a (high 7.5)
- [CVE-2006-4951](https://insights.sbomify.com/CVE-2006-4951/): File upload in n/a (high 7.5)
- [CVE-2006-4950](https://insights.sbomify.com/CVE-2006-4950/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2006-4949](https://insights.sbomify.com/CVE-2006-4949/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2006-4948](https://insights.sbomify.com/CVE-2006-4948/): Memory corruption in n/a (high 7.5)
- [CVE-2006-4947](https://insights.sbomify.com/CVE-2006-4947/): Cross-site scripting in n/a (medium 6.8)
- [CVE-2006-4946](https://insights.sbomify.com/CVE-2006-4946/): Code injection in n/a (medium 5.1)
- [CVE-2006-4945](https://insights.sbomify.com/CVE-2006-4945/): Code injection in n/a (medium 5.1)
- [CVE-2006-4944](https://insights.sbomify.com/CVE-2006-4944/): Code injection in n/a (high 7.5)
- [CVE-2006-4943](https://insights.sbomify.com/CVE-2006-4943/): Path traversal in n/a (medium 5.0)
- [CVE-2006-4942](https://insights.sbomify.com/CVE-2006-4942/): Path traversal in n/a (medium 4.6)
- [CVE-2006-4941](https://insights.sbomify.com/CVE-2006-4941/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2006-4940](https://insights.sbomify.com/CVE-2006-4940/): Information disclosure in n/a (medium 5.0)
- [CVE-2006-4939](https://insights.sbomify.com/CVE-2006-4939/): Information disclosure in n/a (medium 5.0)
- [CVE-2006-4938](https://insights.sbomify.com/CVE-2006-4938/): Information disclosure in n/a (medium 4.0)
- [CVE-2006-4937](https://insights.sbomify.com/CVE-2006-4937/): Information disclosure in n/a (medium 4.0)
- [CVE-2006-4936](https://insights.sbomify.com/CVE-2006-4936/): Moodle does not properly validate module instance id (critical 10.0)
- [CVE-2006-4935](https://insights.sbomify.com/CVE-2006-4935/): File upload in n/a (critical 10.0)
- [CVE-2006-4927](https://insights.sbomify.com/CVE-2006-4927/): Privilege escalation in n/a (medium 4.6)
- [CVE-2006-4926](https://insights.sbomify.com/CVE-2006-4926/): Memory corruption in n/a (high 7.2)
- [CVE-2006-4925](https://insights.sbomify.com/CVE-2006-4925/): Null dereference in n/a (medium 5.0)
- [CVE-2006-4924](https://insights.sbomify.com/CVE-2006-4924/): Denial of service in n/a (high 7.8)
- [CVE-2006-4923](https://insights.sbomify.com/CVE-2006-4923/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2006-4922](https://insights.sbomify.com/CVE-2006-4922/): File upload in n/a (medium 5.0)
- [CVE-2006-4921](https://insights.sbomify.com/CVE-2006-4921/): Code injection in n/a (high 7.5)
- [CVE-2006-4920](https://insights.sbomify.com/CVE-2006-4920/): Code injection in n/a (high 7.5)
- [CVE-2006-4919](https://insights.sbomify.com/CVE-2006-4919/): Path traversal in n/a (low 2.6)
- [CVE-2006-4918](https://insights.sbomify.com/CVE-2006-4918/): Code injection in n/a (high 7.5)
- [CVE-2006-4917](https://insights.sbomify.com/CVE-2006-4917/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2006-4916](https://insights.sbomify.com/CVE-2006-4916/): SQL injection in n/a (high 7.5)
- [CVE-2006-4915](https://insights.sbomify.com/CVE-2006-4915/): Cross-site scripting (XSS) vulnerability in index.php in Innovate Portal 2.0 allows remote attackers to inject arbitrary web script or HTML (medium 4.3)
- [CVE-2006-4914](https://insights.sbomify.com/CVE-2006-4914/): Path traversal in n/a (low 2.6)
- [CVE-2006-4913](https://insights.sbomify.com/CVE-2006-4913/): Path traversal in n/a (high 7.5)
- [CVE-2006-4912](https://insights.sbomify.com/CVE-2006-4912/): Code injection in n/a (high 7.5)
- [CVE-2006-4911](https://insights.sbomify.com/CVE-2006-4911/): Security feature bypass in n/a (high 7.5)
- [CVE-2006-4910](https://insights.sbomify.com/CVE-2006-4910/): Denial of service in n/a (medium 5.0)
- [CVE-2006-4909](https://insights.sbomify.com/CVE-2006-4909/): Cross-site scripting in n/a (low 2.6)
- [CVE-2006-4908](https://insights.sbomify.com/CVE-2006-4908/): Information disclosure in n/a (medium 5.0)
- [CVE-2006-4907](https://insights.sbomify.com/CVE-2006-4907/): Information disclosure in n/a (medium 5.0)
- [CVE-2006-4906](https://insights.sbomify.com/CVE-2006-4906/): SQL injection in n/a (high 7.5)
- [CVE-2006-4905](https://insights.sbomify.com/CVE-2006-4905/): Code injection in n/a (high 7.5)
- [CVE-2006-4904](https://insights.sbomify.com/CVE-2006-4904/): Code injection in n/a (high 7.5)
- [CVE-2006-4902](https://insights.sbomify.com/CVE-2006-4902/): Command injection in n/a (critical 10.0)
- [CVE-2006-4901](https://insights.sbomify.com/CVE-2006-4901/): Missing authorization in n/a (medium 6.4)
- [CVE-2006-4900](https://insights.sbomify.com/CVE-2006-4900/): Path traversal in n/a (medium 5.5)
- [CVE-2006-4899](https://insights.sbomify.com/CVE-2006-4899/): Information disclosure in n/a (medium 5.0)
- [CVE-2006-4898](https://insights.sbomify.com/CVE-2006-4898/): Code injection in n/a (high 7.5)
- [CVE-2006-4897](https://insights.sbomify.com/CVE-2006-4897/): Information disclosure in n/a (medium 5.0)
- [CVE-2006-4895](https://insights.sbomify.com/CVE-2006-4895/): Missing authorization in n/a (high 7.5)
- [CVE-2006-4894](https://insights.sbomify.com/CVE-2006-4894/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2006-4893](https://insights.sbomify.com/CVE-2006-4893/): Code injection in n/a (high 7.5)
- [CVE-2006-4892](https://insights.sbomify.com/CVE-2006-4892/): SQL injection in n/a (high 7.5)
- [CVE-2006-4891](https://insights.sbomify.com/CVE-2006-4891/): SQL injection in n/a (high 7.5)
- [CVE-2006-4890](https://insights.sbomify.com/CVE-2006-4890/): File upload in n/a (high 7.5)
- [CVE-2006-4889](https://insights.sbomify.com/CVE-2006-4889/): Code injection in n/a (medium 5.1)
- [CVE-2006-4888](https://insights.sbomify.com/CVE-2006-4888/): Denial of service in n/a (medium 5.0)
- [CVE-2006-4887](https://insights.sbomify.com/CVE-2006-4887/): Privilege escalation in n/a (high 7.2)
- [CVE-2006-4886](https://insights.sbomify.com/CVE-2006-4886/): Race condition in n/a (low 3.7)
- [CVE-2006-4885](https://insights.sbomify.com/CVE-2006-4885/): Code injection in n/a (high 7.5)
- [CVE-2006-4884](https://insights.sbomify.com/CVE-2006-4884/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2006-4883](https://insights.sbomify.com/CVE-2006-4883/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2006-4882](https://insights.sbomify.com/CVE-2006-4882/): SQL injection in n/a (high 7.5)
- [CVE-2006-4881](https://insights.sbomify.com/CVE-2006-4881/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2006-4880](https://insights.sbomify.com/CVE-2006-4880/): Information disclosure in n/a (medium 5.0)
- [CVE-2006-4879](https://insights.sbomify.com/CVE-2006-4879/): SQL injection in n/a (high 7.5)
- [CVE-2006-4878](https://insights.sbomify.com/CVE-2006-4878/): Path traversal in n/a (medium 5.0)
- [CVE-2006-4877](https://insights.sbomify.com/CVE-2006-4877/): Other in n/a (medium 5.0)
- [CVE-2006-4876](https://insights.sbomify.com/CVE-2006-4876/): SQL injection in n/a (high 7.5)
- [CVE-2006-4875](https://insights.sbomify.com/CVE-2006-4875/): File upload in n/a (medium 5.0)
- [CVE-2006-4874](https://insights.sbomify.com/CVE-2006-4874/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2006-4873](https://insights.sbomify.com/CVE-2006-4873/): Information disclosure in n/a (medium 5.0)
- [CVE-2006-4872](https://insights.sbomify.com/CVE-2006-4872/): SQL injection in n/a (high 7.5)
- [CVE-2006-4871](https://insights.sbomify.com/CVE-2006-4871/): SQL injection in n/a (high 7.5)
- [CVE-2006-4870](https://insights.sbomify.com/CVE-2006-4870/): Code injection in n/a (high 7.5)
- [CVE-2006-4869](https://insights.sbomify.com/CVE-2006-4869/): Code injection in n/a (high 7.5)
- [CVE-2006-4868](https://insights.sbomify.com/CVE-2006-4868/): Memory corruption in n/a (critical 9.3)
- [CVE-2006-4867](https://insights.sbomify.com/CVE-2006-4867/): SQL injection in n/a (high 7.5)
- [CVE-2006-4866](https://insights.sbomify.com/CVE-2006-4866/): Memory corruption in n/a (medium 4.6)
- [CVE-2006-4865](https://insights.sbomify.com/CVE-2006-4865/): Information disclosure in n/a (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/23/