# Vulnerabilities published in 2006


- [CVE-2006-3191](https://insights.sbomify.com/CVE-2006-3191/): Cross-site scripting in tpvgames:mpcs (medium 4.3)
- [CVE-2006-3190](https://insights.sbomify.com/CVE-2006-3190/): SQL injection in hotplug cms:hotplug cms (high 7.5)
- [CVE-2006-3189](https://insights.sbomify.com/CVE-2006-3189/): Cross-site scripting in hotplug cms:hotplug cms (medium 5.8)
- [CVE-2006-3188](https://insights.sbomify.com/CVE-2006-3188/): SQL injection in sharky e-shop:sharky e-shop (high 7.5)
- [CVE-2006-3187](https://insights.sbomify.com/CVE-2006-3187/): Cross-site scripting in sharky e-shop:sharky e-shop (medium 4.3)
- [CVE-2006-3186](https://insights.sbomify.com/CVE-2006-3186/): Cross-site scripting in cms faethon:cms faethon (medium 4.3)
- [CVE-2006-3185](https://insights.sbomify.com/CVE-2006-3185/): Code injection in cms faethon:cms faethon (high 7.5)
- [CVE-2006-3184](https://insights.sbomify.com/CVE-2006-3184/): Code injection in asp stats generator:asp stats generator (medium 4.0)
- [CVE-2006-3183](https://insights.sbomify.com/CVE-2006-3183/): Cross-site scripting in mobescripts:mobile space community (medium 6.8)
- [CVE-2006-3182](https://insights.sbomify.com/CVE-2006-3182/): Path traversal in mobescripts:mobile space community (high 7.5)
- [CVE-2006-3181](https://insights.sbomify.com/CVE-2006-3181/): SQL injection in mobescripts:mobile space community (high 7.5)
- [CVE-2006-3180](https://insights.sbomify.com/CVE-2006-3180/): Cross-site scripting in swsoft:confixx (medium 6.8)
- [CVE-2006-3179](https://insights.sbomify.com/CVE-2006-3179/): Cross-site scripting in swsoft:confixx (medium 4.3)
- [CVE-2006-3178](https://insights.sbomify.com/CVE-2006-3178/): Path traversal in jed wing:chm lib (medium 5.0)
- [CVE-2006-3177](https://insights.sbomify.com/CVE-2006-3177/): Code injection in bible portal project:bible portal project (high 7.5)
- [CVE-2006-3176](https://insights.sbomify.com/CVE-2006-3176/): SQL injection in xaran:xaran cms (high 7.5)
- [CVE-2006-3175](https://insights.sbomify.com/CVE-2006-3175/): Code injection in mcguestbook:mcguestbook (high 7.5)
- [CVE-2006-3174](https://insights.sbomify.com/CVE-2006-3174/): Cross-site scripting in squirrelmail:squirrelmail (low 2.6)
- [CVE-2006-3173](https://insights.sbomify.com/CVE-2006-3173/): Code injection in content\*builder:content\*builder (high 7.5)
- [CVE-2006-3172](https://insights.sbomify.com/CVE-2006-3172/): Code injection in content\*builder:content\*builder (high 7.5)
- [CVE-2006-3171](https://insights.sbomify.com/CVE-2006-3171/): Other in comscripts:cs-forum (medium 5.0)
- [CVE-2006-3170](https://insights.sbomify.com/CVE-2006-3170/): Information disclosure in comscripts:cs-forum (medium 5.0)
- [CVE-2006-3169](https://insights.sbomify.com/CVE-2006-3169/): Cross-site scripting in comscripts:cs-forum (medium 4.3)
- [CVE-2006-3168](https://insights.sbomify.com/CVE-2006-3168/): SQL injection in comscripts:cs-forum (high 7.5)
- [CVE-2006-3167](https://insights.sbomify.com/CVE-2006-3167/): Information disclosure in free realty:free realty (medium 5.0)
- [CVE-2006-3166](https://insights.sbomify.com/CVE-2006-3166/): Cross-site scripting in free realty:free realty (medium 4.3)
- [CVE-2006-3165](https://insights.sbomify.com/CVE-2006-3165/): SQL injection in free realty:free realty (high 7.5)
- [CVE-2006-3164](https://insights.sbomify.com/CVE-2006-3164/): SQL injection in tpl design:tplshop (high 7.5)
- [CVE-2006-3163](https://insights.sbomify.com/CVE-2006-3163/): SQL injection in imgallery:imgallery (high 7.5)
- [CVE-2006-3162](https://insights.sbomify.com/CVE-2006-3162/): Code injection in smartsitecms:smartsitecms (high 7.5)
- [CVE-2006-3161](https://insights.sbomify.com/CVE-2006-3161/): SQL injection in saphp:saphplesson (high 7.5)
- [CVE-2006-3160](https://insights.sbomify.com/CVE-2006-3160/): Cross-site scripting in onedotoh:simple file manager (low 2.6)
- [CVE-2006-3159](https://insights.sbomify.com/CVE-2006-3159/): Information disclosure in sun:iplanet messaging server (low 2.1)
- [CVE-2006-3158](https://insights.sbomify.com/CVE-2006-3158/): File upload in eduha meeting:eduha meeting (high 7.5)
- [CVE-2006-3157](https://insights.sbomify.com/CVE-2006-3157/): Cross-site scripting in thinkfactory:ultimategoogle (medium 5.8)
- [CVE-2006-3156](https://insights.sbomify.com/CVE-2006-3156/): Cross-site scripting in thinkfactory:ultimate eshop (medium 4.3)
- [CVE-2006-3155](https://insights.sbomify.com/CVE-2006-3155/): Cross-site scripting in thinkfactory:ultimate estate (medium 4.3)
- [CVE-2006-3154](https://insights.sbomify.com/CVE-2006-3154/): SQL injection in thinkfactory:ultimate estate (high 7.5)
- [CVE-2006-3153](https://insights.sbomify.com/CVE-2006-3153/): Cross-site scripting in thinkfactory:ultimate estate (medium 4.3)
- [CVE-2006-3152](https://insights.sbomify.com/CVE-2006-3152/): SQL injection in bluehouse project:phptrader (high 7.5)
- [CVE-2006-3151](https://insights.sbomify.com/CVE-2006-3151/): Cross-site scripting in associated:associated cms (medium 4.3)
- [CVE-2006-3150](https://insights.sbomify.com/CVE-2006-3150/): SQL injection in cavoxcms:cavoxcms (high 7.5)
- [CVE-2006-3149](https://insights.sbomify.com/CVE-2006-3149/): Cross-site scripting in phpmyforum:phpmyforum (medium 4.3)
- [CVE-2006-3148](https://insights.sbomify.com/CVE-2006-3148/): SQL injection in open-realty:open-realty (high 7.5)
- [CVE-2006-3147](https://insights.sbomify.com/CVE-2006-3147/): Privilege escalation in hosting controller:hosting controller (medium 6.5)
- [CVE-2006-3146](https://insights.sbomify.com/CVE-2006-3146/): Memory corruption in toshiba:bluetooth stack (medium 5.0)
- [CVE-2006-3145](https://insights.sbomify.com/CVE-2006-3145/): Memory corruption in netpbm:netpbm (medium 5.0)
- [CVE-2006-3144](https://insights.sbomify.com/CVE-2006-3144/): Code injection in ibd:micro cms (high 7.5)
- [CVE-2006-3143](https://insights.sbomify.com/CVE-2006-3143/): Cross-site scripting in maximus:schoolmax (medium 4.0)
- [CVE-2006-3142](https://insights.sbomify.com/CVE-2006-3142/): SQL injection in vbzoom:vbzoom (high 7.5)
- [CVE-2006-3141](https://insights.sbomify.com/CVE-2006-3141/): Cross-site scripting in dpivision:tradingeye shop (medium 4.3)
- [CVE-2006-3140](https://insights.sbomify.com/CVE-2006-3140/): SQL injection in openci:openci (high 7.5)
- [CVE-2006-3139](https://insights.sbomify.com/CVE-2006-3139/): SQL injection in vwar:virtual war (high 7.5)
- [CVE-2006-3138](https://insights.sbomify.com/CVE-2006-3138/): Cross-site scripting in accomplishtechnology:phpmydirectory (medium 4.3)
- [CVE-2006-3137](https://insights.sbomify.com/CVE-2006-3137/): Cross-site scripting in cutting edge computing:edge ecommerce shop (medium 4.3)
- [CVE-2006-3136](https://insights.sbomify.com/CVE-2006-3136/): Code injection in nucleus group:nucleus cms (critical 9.8)
- [CVE-2006-3135](https://insights.sbomify.com/CVE-2006-3135/): SQL injection in hotwebscripts:cms mundo (high 7.5)
- [CVE-2006-3134](https://insights.sbomify.com/CVE-2006-3134/): Memory corruption in gracenote:cddbcontrol activex control (critical 9.3)
- [CVE-2006-3132](https://insights.sbomify.com/CVE-2006-3132/): Cross-site scripting in qto:qtofilemanager (medium 5.8)
- [CVE-2006-3131](https://insights.sbomify.com/CVE-2006-3131/): Cross-site scripting in clubpage:clubpage (medium 4.3)
- [CVE-2006-3130](https://insights.sbomify.com/CVE-2006-3130/): SQL injection in clubpage:clubpage (high 7.5)
- [CVE-2006-3129](https://insights.sbomify.com/CVE-2006-3129/): Cross-site scripting in nc linklist:nc linklist (medium 4.3)
- [CVE-2006-3128](https://insights.sbomify.com/CVE-2006-3128/): File upload in easy-cms:easy-cms (medium 4.6)
- [CVE-2006-3127](https://insights.sbomify.com/CVE-2006-3127/): Denial of service in sun:java enterprise system (high 7.8)
- [CVE-2006-3126](https://insights.sbomify.com/CVE-2006-3126/): Command injection in julian pawlowski:capi4hylafax (high 7.5)
- [CVE-2006-3125](https://insights.sbomify.com/CVE-2006-3125/): Memory corruption in gtetrinet:gtetrinet (high 7.5)
- [CVE-2006-3124](https://insights.sbomify.com/CVE-2006-3124/): Memory corruption in streamripper:streamripper (high 7.5)
- [CVE-2006-3123](https://insights.sbomify.com/CVE-2006-3123/): Integer overflow in matt blaze:cryptographic file system (low 2.1)
- [CVE-2006-3122](https://insights.sbomify.com/CVE-2006-3122/): Denial of service in isc:dhcpd (medium 5.0)
- [CVE-2006-3121](https://insights.sbomify.com/CVE-2006-3121/): Denial of service in high availability linux project:heartbeat (medium 5.0)
- [CVE-2006-3120](https://insights.sbomify.com/CVE-2006-3120/): Memory corruption in brian wotring:osiris (high 7.5)
- [CVE-2006-3119](https://insights.sbomify.com/CVE-2006-3119/): Security feature bypass in fbi:fbi (medium 5.1)
- [CVE-2006-3118](https://insights.sbomify.com/CVE-2006-3118/): Race condition in canonical:spread (low 1.2)
- [CVE-2006-3117](https://insights.sbomify.com/CVE-2006-3117/): Memory corruption in openoffice:openoffice (high 7.6)
- [CVE-2006-3116](https://insights.sbomify.com/CVE-2006-3116/): Code injection in spiffyjr:phpraid (medium 5.1)
- [CVE-2006-3115](https://insights.sbomify.com/CVE-2006-3115/): SQL injection in spiffyjr:phpraid (medium 5.1)
- [CVE-2006-3114](https://insights.sbomify.com/CVE-2006-3114/): Misconfiguration in pc tools:pc tools antivirus (medium 4.6)
- [CVE-2006-3113](https://insights.sbomify.com/CVE-2006-3113/): Use after free in mozilla:firefox (high 7.5)
- [CVE-2006-3112](https://insights.sbomify.com/CVE-2006-3112/): Information disclosure in chipmailer:chipmailer (medium 5.0)
- [CVE-2006-3111](https://insights.sbomify.com/CVE-2006-3111/): SQL injection in chipmailer:chipmailer (high 7.5)
- [CVE-2006-3110](https://insights.sbomify.com/CVE-2006-3110/): Cross-site scripting in chipmailer:chipmailer (medium 4.3)
- [CVE-2006-3109](https://insights.sbomify.com/CVE-2006-3109/): Cross-site scripting in cisco:call manager (medium 4.3)
- [CVE-2006-3108](https://insights.sbomify.com/CVE-2006-3108/): Cross-site scripting in emailarchitect:email server (medium 4.3)
- [CVE-2006-3107](https://insights.sbomify.com/CVE-2006-3107/): Code injection in docebo:docebo (medium 5.1)
- [CVE-2006-3106](https://insights.sbomify.com/CVE-2006-3106/): Cross-site scripting in fredi bach:phpmydesktop arcade (medium 4.3)
- [CVE-2006-3105](https://insights.sbomify.com/CVE-2006-3105/): Other in bitweaver:bitweaver (medium 5.0)
- [CVE-2006-3104](https://insights.sbomify.com/CVE-2006-3104/): Information disclosure in bitweaver:bitweaver (medium 5.0)
- [CVE-2006-3103](https://insights.sbomify.com/CVE-2006-3103/): Cross-site scripting in bitweaver:bitweaver (medium 4.3)
- [CVE-2006-3102](https://insights.sbomify.com/CVE-2006-3102/): Race condition in bitweaver:bitweaver (medium 5.1)
- [CVE-2006-3101](https://insights.sbomify.com/CVE-2006-3101/): Cross-site scripting in cisco:secure access control server (medium 4.3)
- [CVE-2006-3100](https://insights.sbomify.com/CVE-2006-3100/): Memory corruption in termpkg project:termpkg (critical 9.8)
- [CVE-2006-3097](https://insights.sbomify.com/CVE-2006-3097/): Denial of service in hp:hp-ux (medium 4.9)
- [CVE-2006-3096](https://insights.sbomify.com/CVE-2006-3096/): SQL injection in ipostmx:ipostmx 2005 (high 7.5)
- [CVE-2006-3095](https://insights.sbomify.com/CVE-2006-3095/): Cross-site scripting in ipostmx:ipostmx 2005 (medium 4.3)
- [CVE-2006-3094](https://insights.sbomify.com/CVE-2006-3094/): SQL injection in vincent hor:calendarix basic (medium 5.1)
- [CVE-2006-3093](https://insights.sbomify.com/CVE-2006-3093/): Other in adobe:acrobat reader (medium 6.8)
- [CVE-2006-3092](https://insights.sbomify.com/CVE-2006-3092/): Auth bypass in phpmyfactures:phpmyfactures (high 7.5)
- [CVE-2006-3091](https://insights.sbomify.com/CVE-2006-3091/): Information disclosure in phpmyfactures:phpmyfactures (medium 5.0)
- [CVE-2006-3090](https://insights.sbomify.com/CVE-2006-3090/): SQL injection in phpmyfactures:phpmyfactures (medium 5.1)
- [CVE-2006-3089](https://insights.sbomify.com/CVE-2006-3089/): Cross-site scripting in phpmyfactures:phpmyfactures (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/40/