# Vulnerabilities published in 2006


- [CVE-2006-3088](https://insights.sbomify.com/CVE-2006-3088/): Cross-site scripting in cescripts:car classifieds (medium 4.3)
- [CVE-2006-3087](https://insights.sbomify.com/CVE-2006-3087/): Cross-site scripting in ezgallery:ezgallery (medium 4.3)
- [CVE-2006-3086](https://insights.sbomify.com/CVE-2006-3086/): Memory corruption in microsoft:hyperlink object library (critical 9.3)
- [CVE-2006-3085](https://insights.sbomify.com/CVE-2006-3085/): Denial of service in linux:linux kernel (high 7.8)
- [CVE-2006-3084](https://insights.sbomify.com/CVE-2006-3084/): Privilege escalation in heimdal:heimdal (high 7.2)
- [CVE-2006-3083](https://insights.sbomify.com/CVE-2006-3083/): Privilege escalation in heimdal:heimdal (high 7.2)
- [CVE-2006-3082](https://insights.sbomify.com/CVE-2006-3082/): Integer overflow in gnupg:gnupg (medium 5.0)
- [CVE-2006-3081](https://insights.sbomify.com/CVE-2006-3081/): Null dereference in mysql:mysql (medium 4.0)
- [CVE-2006-3080](https://insights.sbomify.com/CVE-2006-3080/): Cross-site scripting in axent:axentforum (medium 4.3)
- [CVE-2006-3079](https://insights.sbomify.com/CVE-2006-3079/): Cross-site scripting in sspwiz:sspwiz plus (medium 4.3)
- [CVE-2006-3078](https://insights.sbomify.com/CVE-2006-3078/): SQL injection in apboard:apboard (high 7.5)
- [CVE-2006-3077](https://insights.sbomify.com/CVE-2006-3077/): Cross-site scripting in axent:axentguestbook (medium 4.3)
- [CVE-2006-3076](https://insights.sbomify.com/CVE-2006-3076/): Code injection in phpbluedragon:phpbluedragon cms (medium 6.4)
- [CVE-2006-3075](https://insights.sbomify.com/CVE-2006-3075/): Code injection in picturedis:picturedis photoalbum (high 7.5)
- [CVE-2006-3074](https://insights.sbomify.com/CVE-2006-3074/): Denial of service in kaspersky:kaspersky anti-virus (medium 5.0)
- [CVE-2006-3073](https://insights.sbomify.com/CVE-2006-3073/): Cross-site scripting in cisco:asa 5500 (low 2.6)
- [CVE-2006-3072](https://insights.sbomify.com/CVE-2006-3072/): Code injection in symantec:security information manager (medium 4.6)
- [CVE-2006-3071](https://insights.sbomify.com/CVE-2006-3071/): Cross-site scripting in anton belev:mp3 search archive (low 2.6)
- [CVE-2006-3070](https://insights.sbomify.com/CVE-2006-3070/): File upload in zeroboard:zeroboard (medium 5.0)
- [CVE-2006-3069](https://insights.sbomify.com/CVE-2006-3069/): Code injection in iglooweb:doublespeak (high 7.5)
- [CVE-2006-3068](https://insights.sbomify.com/CVE-2006-3068/): Memory corruption in ibm:db2 universal database (medium 5.0)
- [CVE-2006-3067](https://insights.sbomify.com/CVE-2006-3067/): Denial of service in ibm:db2 universal database (medium 5.0)
- [CVE-2006-3066](https://insights.sbomify.com/CVE-2006-3066/): Memory corruption in ibm:db2 universal database (medium 5.0)
- [CVE-2006-3065](https://insights.sbomify.com/CVE-2006-3065/): SQL injection in blursoft:blur6ex (high 7.5)
- [CVE-2006-3064](https://insights.sbomify.com/CVE-2006-3064/): SQL injection in coppermine:coppermine photo gallery (high 7.5)
- [CVE-2006-3063](https://insights.sbomify.com/CVE-2006-3063/): Cross-site scripting in myphp guestbook:myphp guestbook (low 2.6)
- [CVE-2006-3062](https://insights.sbomify.com/CVE-2006-3062/): Cross-site scripting in myphp guestbook:myphp guestbook (low 2.6)
- [CVE-2006-3061](https://insights.sbomify.com/CVE-2006-3061/): Cross-site scripting in review-script.com:five star review script (low 2.6)
- [CVE-2006-3060](https://insights.sbomify.com/CVE-2006-3060/): Cross-site scripting in webexceluk:p.a.i.d (medium 4.3)
- [CVE-2006-3059](https://insights.sbomify.com/CVE-2006-3059/): Other in microsoft:excel (critical 9.3)
- [CVE-2006-3057](https://insights.sbomify.com/CVE-2006-3057/): Memory corruption in gnome:dhcdbd (medium 5.0)
- [CVE-2006-3056](https://insights.sbomify.com/CVE-2006-3056/): SQL injection in vbzoom:vbzoom (high 7.5)
- [CVE-2006-3055](https://insights.sbomify.com/CVE-2006-3055/): SQL injection in vbzoom:vbzoom (high 7.5)
- [CVE-2006-3054](https://insights.sbomify.com/CVE-2006-3054/): SQL injection in vbzoom:vbzoom (high 7.5)
- [CVE-2006-3053](https://insights.sbomify.com/CVE-2006-3053/): Code injection in phorum:phorum (high 7.5)
- [CVE-2006-3052](https://insights.sbomify.com/CVE-2006-3052/): Cross-site scripting in cescripts:event registration 2checkout (medium 6.8)
- [CVE-2006-3051](https://insights.sbomify.com/CVE-2006-3051/): Cross-site scripting in six offene systeme gmbh:sixcms (medium 5.1)
- [CVE-2006-3050](https://insights.sbomify.com/CVE-2006-3050/): Path traversal in six offene systeme gmbh:sixcms (low 2.6)
- [CVE-2006-3049](https://insights.sbomify.com/CVE-2006-3049/): Cross-site scripting in mole group ticket booking script:mole group ticket booking script (medium 4.3)
- [CVE-2006-3048](https://insights.sbomify.com/CVE-2006-3048/): SQL injection in tiki:tikiwiki cms\/groupware (high 7.5)
- [CVE-2006-3047](https://insights.sbomify.com/CVE-2006-3047/): Cross-site scripting in tiki:tikiwiki cms\/groupware (medium 4.3)
- [CVE-2006-3046](https://insights.sbomify.com/CVE-2006-3046/): Auth bypass in subtext:subtext (medium 6.5)
- [CVE-2006-3045](https://insights.sbomify.com/CVE-2006-3045/): Code injection in teake nutma:foing (high 7.5)
- [CVE-2006-3044](https://insights.sbomify.com/CVE-2006-3044/): Cross-site scripting in logisphere:logisphere (low 2.6)
- [CVE-2006-3043](https://insights.sbomify.com/CVE-2006-3043/): Cross-site scripting in cfxe-cms:cfxe-cms (low 2.6)
- [CVE-2006-3042](https://insights.sbomify.com/CVE-2006-3042/): Code injection in ispconfig:ispconfig (high 7.5)
- [CVE-2006-3041](https://insights.sbomify.com/CVE-2006-3041/): Code injection in codewalkers:ltwcalendar (high 7.5)
- [CVE-2006-3040](https://insights.sbomify.com/CVE-2006-3040/): Code injection in amr talkbox:amr talkbox (high 7.5)
- [CVE-2006-3039](https://insights.sbomify.com/CVE-2006-3039/): Cross-site scripting in cescripts:realty home rent (low 2.6)
- [CVE-2006-3038](https://insights.sbomify.com/CVE-2006-3038/): Cross-site scripting in cescripts:realty room rent (low 2.6)
- [CVE-2006-3037](https://insights.sbomify.com/CVE-2006-3037/): Cross-site scripting in site trade:st admanager lite (low 2.6)
- [CVE-2006-3036](https://insights.sbomify.com/CVE-2006-3036/): Cross-site scripting in andy mack:35mmslidegallery (medium 5.8)
- [CVE-2006-3035](https://insights.sbomify.com/CVE-2006-3035/): Cross-site scripting in myscrapbook:myscrapbook (medium 5.8)
- [CVE-2006-3034](https://insights.sbomify.com/CVE-2006-3034/): Information disclosure in myscrapbook:myscrapbook (medium 5.0)
- [CVE-2006-3033](https://insights.sbomify.com/CVE-2006-3033/): Cross-site scripting in myscrapbook:myscrapbook (medium 4.3)
- [CVE-2006-3032](https://insights.sbomify.com/CVE-2006-3032/): Cross-site scripting in pensacola web designs:xtreme asp photo gallery (medium 4.3)
- [CVE-2006-3031](https://insights.sbomify.com/CVE-2006-3031/): Cross-site scripting in fipsasp:fipscms (medium 4.3)
- [CVE-2006-3030](https://insights.sbomify.com/CVE-2006-3030/): Cross-site scripting in dwzone:dwzone shopping cart (medium 4.3)
- [CVE-2006-3029](https://insights.sbomify.com/CVE-2006-3029/): Cross-site scripting in clicktech:clickcart (medium 4.3)
- [CVE-2006-3028](https://insights.sbomify.com/CVE-2006-3028/): Code injection in minerva:minerva (high 7.5)
- [CVE-2006-3027](https://insights.sbomify.com/CVE-2006-3027/): SQL injection in enthrallweb:ephotos (high 7.5)
- [CVE-2006-3026](https://insights.sbomify.com/CVE-2006-3026/): Cross-site scripting in clicktech:clickgallery (medium 4.3)
- [CVE-2006-3025](https://insights.sbomify.com/CVE-2006-3025/): Cross-site scripting in lucid designs:lucid calendar (medium 6.8)
- [CVE-2006-3024](https://insights.sbomify.com/CVE-2006-3024/): Cross-site scripting in evgenius:evgenius counter (medium 4.3)
- [CVE-2006-3023](https://insights.sbomify.com/CVE-2006-3023/): Cross-site scripting in uapplication:uphotogallery (medium 4.3)
- [CVE-2006-3022](https://insights.sbomify.com/CVE-2006-3022/): Cross-site scripting in fipsasp:fipsgallery (medium 6.8)
- [CVE-2006-3021](https://insights.sbomify.com/CVE-2006-3021/): Cross-site scripting in blue-collar productions:i-gallery (medium 6.8)
- [CVE-2006-3020](https://insights.sbomify.com/CVE-2006-3020/): Cross-site scripting in planete afrique:ws-album (medium 6.8)
- [CVE-2006-3019](https://insights.sbomify.com/CVE-2006-3019/): Code injection in phpcms:phpcms (high 7.5)
- [CVE-2006-3018](https://insights.sbomify.com/CVE-2006-3018/): Memory corruption in php group:php (high 7.5)
- [CVE-2006-3017](https://insights.sbomify.com/CVE-2006-3017/): Other in php:php (critical 9.3)
- [CVE-2006-3016](https://insights.sbomify.com/CVE-2006-3016/): Other in php group:php (critical 9.3)
- [CVE-2006-3015](https://insights.sbomify.com/CVE-2006-3015/): Command injection in winscp:winscp (high 7.1)
- [CVE-2006-3014](https://insights.sbomify.com/CVE-2006-3014/): Code injection in microsoft:excel (medium 5.1)
- [CVE-2006-3013](https://insights.sbomify.com/CVE-2006-3013/): SQL injection in eschew.net:phpbannerexchange (medium 5.1)
- [CVE-2006-3012](https://insights.sbomify.com/CVE-2006-3012/): SQL injection in eschew.net:phpbannerexchange (high 7.5)
- [CVE-2006-3011](https://insights.sbomify.com/CVE-2006-3011/): Security feature bypass in php:php (medium 4.6)
- [CVE-2006-3010](https://insights.sbomify.com/CVE-2006-3010/): SQL injection in aliacom:open business management (high 7.5)
- [CVE-2006-3009](https://insights.sbomify.com/CVE-2006-3009/): Cross-site scripting in aliacom:open business management (medium 5.8)
- [CVE-2006-3007](https://insights.sbomify.com/CVE-2006-3007/): Cross-site scripting in nullsoft:shoutcast server (medium 4.3)
- [CVE-2006-3006](https://insights.sbomify.com/CVE-2006-3006/): Cross-site scripting in ifoto:ifoto (medium 4.3)
- [CVE-2006-3005](https://insights.sbomify.com/CVE-2006-3005/): Denial of service in gentoo:linux (medium 5.0)
- [CVE-2006-3004](https://insights.sbomify.com/CVE-2006-3004/): Cross-site scripting in scriptsez:ez ringtone manager (medium 4.3)
- [CVE-2006-3003](https://insights.sbomify.com/CVE-2006-3003/): Information disclosure in easy ad-manager:easy ad-manager (medium 4.3)
- [CVE-2006-3002](https://insights.sbomify.com/CVE-2006-3002/): Cross-site scripting in easy ad-manager:easy ad-manager (medium 5.8)
- [CVE-2006-3001](https://insights.sbomify.com/CVE-2006-3001/): Cross-site scripting in okscripts:okmall (medium 5.8)
- [CVE-2006-3000](https://insights.sbomify.com/CVE-2006-3000/): Cross-site scripting in okscripts:okarticles (medium 4.3)
- [CVE-2006-2999](https://insights.sbomify.com/CVE-2006-2999/): Cross-site scripting in okscripts:quicklinks (medium 4.3)
- [CVE-2006-2998](https://insights.sbomify.com/CVE-2006-2998/): Code injection in free qboard:free qboard (high 7.5)
- [CVE-2006-2997](https://insights.sbomify.com/CVE-2006-2997/): Cross-site scripting in zms publishing:zms (low 2.6)
- [CVE-2006-2996](https://insights.sbomify.com/CVE-2006-2996/): Code injection in lovecompass:aepartner (high 7.5)
- [CVE-2006-2995](https://insights.sbomify.com/CVE-2006-2995/): Code injection in webprojectdb:webprojectdb (high 7.5)
- [CVE-2006-2994](https://insights.sbomify.com/CVE-2006-2994/): Cross-site scripting in christian becher:phazizguestbook (medium 5.8)
- [CVE-2006-2993](https://insights.sbomify.com/CVE-2006-2993/): SQL injection in my photo scrapbook:my photo scrapbook (high 7.5)
- [CVE-2006-2992](https://insights.sbomify.com/CVE-2006-2992/): Cross-site scripting in my photo scrapbook:my photo scrapbook (medium 4.3)
- [CVE-2006-2991](https://insights.sbomify.com/CVE-2006-2991/): Cross-site scripting in ringlink:ringlink (medium 4.3)
- [CVE-2006-2990](https://insights.sbomify.com/CVE-2006-2990/): Cross-site scripting in vanillasoft:vanillasoft helpdesk (medium 4.3)
- [CVE-2006-2989](https://insights.sbomify.com/CVE-2006-2989/): Cross-site scripting in iisworks:listpics (medium 4.3)
- [CVE-2006-2988](https://insights.sbomify.com/CVE-2006-2988/): Cross-site scripting in chemical dictionary:chemical dictionary (medium 4.3)
- [CVE-2006-2987](https://insights.sbomify.com/CVE-2006-2987/): SQL injection in dominios europa:picrate (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/41/