# Vulnerabilities published in 2006


- [CVE-2006-3393](https://insights.sbomify.com/CVE-2006-3393/): Denial of service in electronic arts:nascar racing (high 7.8)
- [CVE-2006-3392](https://insights.sbomify.com/CVE-2006-3392/): Path traversal in usermin:usermin (medium 5.0)
- [CVE-2006-3391](https://insights.sbomify.com/CVE-2006-3391/): Code injection in imbc:imbccontents activex control (medium 5.1)
- [CVE-2006-3390](https://insights.sbomify.com/CVE-2006-3390/): Information disclosure in wordpress:wordpress (medium 5.0)
- [CVE-2006-3389](https://insights.sbomify.com/CVE-2006-3389/): Information disclosure in wordpress:wordpress (medium 5.0)
- [CVE-2006-3388](https://insights.sbomify.com/CVE-2006-3388/): Cross-site scripting in phpmyadmin:phpmyadmin (medium 5.8)
- [CVE-2006-3387](https://insights.sbomify.com/CVE-2006-3387/): Path traversal in fusionphp:fusion news (medium 5.1)
- [CVE-2006-3386](https://insights.sbomify.com/CVE-2006-3386/): Information disclosure in vincent leclercq:news (medium 5.0)
- [CVE-2006-3385](https://insights.sbomify.com/CVE-2006-3385/): Cross-site scripting in vincent leclercq:news (medium 5.8)
- [CVE-2006-3384](https://insights.sbomify.com/CVE-2006-3384/): SQL injection in vincent leclercq:news (medium 5.1)
- [CVE-2006-3383](https://insights.sbomify.com/CVE-2006-3383/): Cross-site scripting in mads:mads (medium 5.8)
- [CVE-2006-3382](https://insights.sbomify.com/CVE-2006-3382/): Cross-site scripting in mads:mads (medium 4.3)
- [CVE-2006-3381](https://insights.sbomify.com/CVE-2006-3381/): File upload in sturgeon upload:sturgeon upload (high 7.5)
- [CVE-2006-3380](https://insights.sbomify.com/CVE-2006-3380/): Denial of service in freestyle:freestyle wiki (medium 5.0)
- [CVE-2006-3379](https://insights.sbomify.com/CVE-2006-3379/): Denial of service in hiki wiki:hiki wiki (medium 5.0)
- [CVE-2006-3378](https://insights.sbomify.com/CVE-2006-3378/): Privilege escalation in ubuntu:ubuntu linux (high 7.2)
- [CVE-2006-3377](https://insights.sbomify.com/CVE-2006-3377/): Cross-site scripting in jmb software:autorank (medium 4.0)
- [CVE-2006-3376](https://insights.sbomify.com/CVE-2006-3376/): Integer overflow in wvware:libwmf (high 7.5)
- [CVE-2006-3375](https://insights.sbomify.com/CVE-2006-3375/): Code injection in randshop:randshop (high 7.5)
- [CVE-2006-3374](https://insights.sbomify.com/CVE-2006-3374/): Code injection in randshop:randshop (high 7.5)
- [CVE-2006-3373](https://insights.sbomify.com/CVE-2006-3373/): Privilege escalation in hobbit monitor:hobbit monitor (low 2.1)
- [CVE-2006-3372](https://insights.sbomify.com/CVE-2006-3372/): Null dereference in apple:safari (medium 5.0)
- [CVE-2006-3371](https://insights.sbomify.com/CVE-2006-3371/): Information disclosure in eupla:foros (medium 5.0)
- [CVE-2006-3370](https://insights.sbomify.com/CVE-2006-3370/): Information disclosure in bb-news:blueboy (medium 5.0)
- [CVE-2006-3369](https://insights.sbomify.com/CVE-2006-3369/): Information disclosure in iduprey:kamikaze-qscm (medium 5.0)
- [CVE-2006-3368](https://insights.sbomify.com/CVE-2006-3368/): Information disclosure in efone:efone (medium 5.0)
- [CVE-2006-3367](https://insights.sbomify.com/CVE-2006-3367/): Information disclosure in mp3netbox:mp3netbox (medium 5.0)
- [CVE-2006-3366](https://insights.sbomify.com/CVE-2006-3366/): Cross-site scripting in v3 chat:v3 chat (low 2.6)
- [CVE-2006-3365](https://insights.sbomify.com/CVE-2006-3365/): Information disclosure in v3 chat:v3 chat (low 2.6)
- [CVE-2006-3364](https://insights.sbomify.com/CVE-2006-3364/): SQL injection in f-art agency:blog cms (high 7.5)
- [CVE-2006-3363](https://insights.sbomify.com/CVE-2006-3363/): Code injection in xoops:xoops glossaire module (medium 5.1)
- [CVE-2006-3362](https://insights.sbomify.com/CVE-2006-3362/): File upload in geeklog:geeklog (medium 5.1)
- [CVE-2006-3361](https://insights.sbomify.com/CVE-2006-3361/): Code injection in stud.ip:stud.ip (medium 5.1)
- [CVE-2006-3360](https://insights.sbomify.com/CVE-2006-3360/): phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence (medium 5.0)
- [CVE-2006-3359](https://insights.sbomify.com/CVE-2006-3359/): SQL injection in newsphp:newsphp (high 7.5)
- [CVE-2006-3358](https://insights.sbomify.com/CVE-2006-3358/): Cross-site scripting in newsphp:newsphp (medium 6.8)
- [CVE-2006-3357](https://insights.sbomify.com/CVE-2006-3357/): Memory corruption in microsoft:internet explorer (high 7.5)
- [CVE-2006-3356](https://insights.sbomify.com/CVE-2006-3356/): Null dereference in apple:mac os x (low 2.6)
- [CVE-2006-3355](https://insights.sbomify.com/CVE-2006-3355/): Memory corruption in mpg123:mpg123 (high 7.5)
- [CVE-2006-3354](https://insights.sbomify.com/CVE-2006-3354/): Null dereference in canon:network camera server vb101 (medium 5.0)
- [CVE-2006-3353](https://insights.sbomify.com/CVE-2006-3353/): Memory corruption in opera:opera browser (medium 5.0)
- [CVE-2006-3352](https://insights.sbomify.com/CVE-2006-3352/): Security feature bypass in mozilla:firefox (medium 6.4)
- [CVE-2006-3351](https://insights.sbomify.com/CVE-2006-3351/): Memory corruption in microsoft:windows 2003 server (medium 5.4)
- [CVE-2006-3350](https://insights.sbomify.com/CVE-2006-3350/): Memory corruption in cimmetry systems:autovue solidmodel professional (medium 5.1)
- [CVE-2006-3349](https://insights.sbomify.com/CVE-2006-3349/): SQL injection in sms script:sms script (high 7.5)
- [CVE-2006-3348](https://insights.sbomify.com/CVE-2006-3348/): SQL injection in swsoft:hspcomplete (high 7.5)
- [CVE-2006-3347](https://insights.sbomify.com/CVE-2006-3347/): SQL injection in devilz clanportal:devilz clanportal (high 7.5)
- [CVE-2006-3346](https://insights.sbomify.com/CVE-2006-3346/): SQL injection in carlos sanchez valle:mynewsgroups (high 7.5)
- [CVE-2006-3345](https://insights.sbomify.com/CVE-2006-3345/): Cross-site scripting in ajax softwares:alipager (medium 4.3)
- [CVE-2006-3344](https://insights.sbomify.com/CVE-2006-3344/): Auth bypass in siemens:speedstream wireless router (high 7.5)
- [CVE-2006-3343](https://insights.sbomify.com/CVE-2006-3343/): Code injection in crisoft ricette:crisoft ricette (high 7.5)
- [CVE-2006-3342](https://insights.sbomify.com/CVE-2006-3342/): Cross-site scripting in olate:arctic (low 2.6)
- [CVE-2006-3341](https://insights.sbomify.com/CVE-2006-3341/): SQL injection in myads:myads (high 7.5)
- [CVE-2006-3340](https://insights.sbomify.com/CVE-2006-3340/): Code injection in pearlinger:pearl for mambo (medium 5.1)
- [CVE-2006-3339](https://insights.sbomify.com/CVE-2006-3339/): Information disclosure in atlassian:jira (medium 5.0)
- [CVE-2006-3338](https://insights.sbomify.com/CVE-2006-3338/): Cross-site scripting in atlassian:jira (low 2.6)
- [CVE-2006-3337](https://insights.sbomify.com/CVE-2006-3337/): Cross-site scripting in cpanel:cpanel (low 2.6)
- [CVE-2006-3336](https://insights.sbomify.com/CVE-2006-3336/): File upload in twiki:twiki (medium 4.0)
- [CVE-2006-3335](https://insights.sbomify.com/CVE-2006-3335/): Privilege escalation in hp:hp-ux (high 7.2)
- [CVE-2006-3334](https://insights.sbomify.com/CVE-2006-3334/): Memory corruption in greg roelofs:libpng (high 7.5)
- [CVE-2006-3333](https://insights.sbomify.com/CVE-2006-3333/): Cross-site scripting in phpoutsourcing:zorum (low 2.6)
- [CVE-2006-3332](https://insights.sbomify.com/CVE-2006-3332/): SQL injection in phpoutsourcing:zorum (high 7.5)
- [CVE-2006-3331](https://insights.sbomify.com/CVE-2006-3331/): Security feature bypass in opera:opera browser (medium 5.0)
- [CVE-2006-3330](https://insights.sbomify.com/CVE-2006-3330/): SQL injection in deltascripts:php classifieds (medium 6.8)
- [CVE-2006-3329](https://insights.sbomify.com/CVE-2006-3329/): SQL injection in deltascripts:php classifieds (high 7.5)
- [CVE-2006-3328](https://insights.sbomify.com/CVE-2006-3328/): Information disclosure in starflow software:hostflow (medium 5.8)
- [CVE-2006-3327](https://insights.sbomify.com/CVE-2006-3327/): Cross-site scripting in e-cbd.biz:custom dating biz dating script (medium 4.3)
- [CVE-2006-3326](https://insights.sbomify.com/CVE-2006-3326/): Path traversal in joesph leung:quickzip (low 2.6)
- [CVE-2006-3325](https://insights.sbomify.com/CVE-2006-3325/): Other in id software:quake 3 engine (medium 5.0)
- [CVE-2006-3324](https://insights.sbomify.com/CVE-2006-3324/): Path traversal in id software:quake 3 engine (medium 5.0)
- [CVE-2006-3323](https://insights.sbomify.com/CVE-2006-3323/): Code injection in mastersfusion:mf piadas (high 7.5)
- [CVE-2006-3322](https://insights.sbomify.com/CVE-2006-3322/): SQL injection in spiffyjr:phpraid (medium 5.1)
- [CVE-2006-3321](https://insights.sbomify.com/CVE-2006-3321/): Cross-site scripting in 2enetworx:openforum (medium 4.3)
- [CVE-2006-3320](https://insights.sbomify.com/CVE-2006-3320/): Cross-site scripting in sitebar:sitebar (low 2.6)
- [CVE-2006-3319](https://insights.sbomify.com/CVE-2006-3319/): Cross-site scripting in php icalendar:php icalendar (medium 4.3)
- [CVE-2006-3318](https://insights.sbomify.com/CVE-2006-3318/): SQL injection in spiffyjr:phpraid (medium 5.1)
- [CVE-2006-3317](https://insights.sbomify.com/CVE-2006-3317/): Code injection in spiffyjr:phpraid (medium 5.1)
- [CVE-2006-3316](https://insights.sbomify.com/CVE-2006-3316/): Code injection in spiffyjr:phpraid (medium 5.1)
- [CVE-2006-3315](https://insights.sbomify.com/CVE-2006-3315/): Code injection in rahnemaco:rahnemaco (high 7.5)
- [CVE-2006-3314](https://insights.sbomify.com/CVE-2006-3314/): Code injection in rahnemaco:rahnemaco (high 7.5)
- [CVE-2006-3313](https://insights.sbomify.com/CVE-2006-3313/): Cross-site scripting in netsoft:smartnet (low 2.6)
- [CVE-2006-3312](https://insights.sbomify.com/CVE-2006-3312/): Cross-site scripting in qatraq:qatraq (medium 4.3)
- [CVE-2006-3311](https://insights.sbomify.com/CVE-2006-3311/): Memory corruption in adobe:flash player (medium 5.1)
- [CVE-2006-3309](https://insights.sbomify.com/CVE-2006-3309/): SQL injection in internet scout project:scout portal toolkit (high 7.5)
- [CVE-2006-3308](https://insights.sbomify.com/CVE-2006-3308/): Cross-site scripting in zoid technologies:project eros bbsengine (critical 9.3)
- [CVE-2006-3307](https://insights.sbomify.com/CVE-2006-3307/): SQL injection in zoid technologies:project eros bbsengine (high 7.5)
- [CVE-2006-3306](https://insights.sbomify.com/CVE-2006-3306/): Cross-site scripting in zoid technologies:project eros bbsengine (medium 4.3)
- [CVE-2006-3305](https://insights.sbomify.com/CVE-2006-3305/): Cross-site scripting in uebimiau:uebimiau (low 2.6)
- [CVE-2006-3304](https://insights.sbomify.com/CVE-2006-3304/): SQL injection in deluxebb:deluxebb (high 7.5)
- [CVE-2006-3303](https://insights.sbomify.com/CVE-2006-3303/): Cross-site scripting in deluxebb:deluxebb (medium 4.3)
- [CVE-2006-3302](https://insights.sbomify.com/CVE-2006-3302/): Code injection in cbsms:mambo module (medium 5.1)
- [CVE-2006-3301](https://insights.sbomify.com/CVE-2006-3301/): Cross-site scripting in phpqladmin:phpqladmin (low 2.6)
- [CVE-2006-3300](https://insights.sbomify.com/CVE-2006-3300/): Code injection in phpmysms:phpmysms (high 7.5)
- [CVE-2006-3299](https://insights.sbomify.com/CVE-2006-3299/): Cross-site scripting in metalheadws:usenet (low 2.6)
- [CVE-2006-3298](https://insights.sbomify.com/CVE-2006-3298/): Denial of service in yahoo:messenger (medium 5.0)
- [CVE-2006-3297](https://insights.sbomify.com/CVE-2006-3297/): Cross-site scripting in uebimiau:uebimiau (medium 4.3)
- [CVE-2006-3296](https://insights.sbomify.com/CVE-2006-3296/): SQL injection in george currums:open guestbook (high 7.5)
- [CVE-2006-3295](https://insights.sbomify.com/CVE-2006-3295/): Cross-site scripting in georgecurrums:open guestbook (medium 4.3)
- [CVE-2006-3294](https://insights.sbomify.com/CVE-2006-3294/): Code injection in cbsms:mambo module (medium 5.1)
- [CVE-2006-3293](https://insights.sbomify.com/CVE-2006-3293/): Denial of service in proton:energymech irc bot (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/38/