# Vulnerabilities published in 2006


- [CVE-2006-2986](https://insights.sbomify.com/CVE-2006-2986/): Cross-site scripting in baby katie media:very simple car lister (medium 4.3)
- [CVE-2006-2985](https://insights.sbomify.com/CVE-2006-2985/): SQL injection in integramod:integramod (high 7.5)
- [CVE-2006-2984](https://insights.sbomify.com/CVE-2006-2984/): Cross-site scripting in integramod:integramod (medium 4.3)
- [CVE-2006-2983](https://insights.sbomify.com/CVE-2006-2983/): Code injection in enterprise payroll systems:enterprise payroll systems (high 7.5)
- [CVE-2006-2982](https://insights.sbomify.com/CVE-2006-2982/): Code injection in enterprise payroll systems:enterprise payroll systems (high 7.5)
- [CVE-2006-2981](https://insights.sbomify.com/CVE-2006-2981/): SQL injection in arantius:vice stats (high 7.5)
- [CVE-2006-2980](https://insights.sbomify.com/CVE-2006-2980/): SQL injection in viart ltd:viart shop free (high 7.5)
- [CVE-2006-2979](https://insights.sbomify.com/CVE-2006-2979/): Cross-site scripting in viart:shop (low 2.6)
- [CVE-2006-2978](https://insights.sbomify.com/CVE-2006-2978/): Information disclosure in mafia moblog:mafia moblog (medium 5.0)
- [CVE-2006-2977](https://insights.sbomify.com/CVE-2006-2977/): SQL injection in mafia moblog:mafia moblog (high 7.5)
- [CVE-2006-2976](https://insights.sbomify.com/CVE-2006-2976/): Other in coppermine:coppermine photo gallery (high 7.5)
- [CVE-2006-2975](https://insights.sbomify.com/CVE-2006-2975/): Cross-site scripting in pbl guestbook:pbl guestbook (low 2.6)
- [CVE-2006-2974](https://insights.sbomify.com/CVE-2006-2974/): Cross-site scripting in emailarchitect:email server (low 2.6)
- [CVE-2006-2973](https://insights.sbomify.com/CVE-2006-2973/): SQL injection in php lite:calendar express (high 7.5)
- [CVE-2006-2972](https://insights.sbomify.com/CVE-2006-2972/): SQL injection in arantius:vice stats (high 7.5)
- [CVE-2006-2971](https://insights.sbomify.com/CVE-2006-2971/): Integer overflow in overkill:overkill (medium 5.0)
- [CVE-2006-2970](https://insights.sbomify.com/CVE-2006-2970/): Information disclosure in l0j1k:tinymuw (medium 5.0)
- [CVE-2006-2969](https://insights.sbomify.com/CVE-2006-2969/): Cross-site scripting in l0j1k:tinymuw (medium 4.3)
- [CVE-2006-2968](https://insights.sbomify.com/CVE-2006-2968/): Cross-site scripting in php labware:labwiki (medium 4.3)
- [CVE-2006-2967](https://insights.sbomify.com/CVE-2006-2967/): Security feature bypass in syworks:safenet (low 2.1)
- [CVE-2006-2966](https://insights.sbomify.com/CVE-2006-2966/): Cross-site scripting in particle soft:particle wiki (medium 4.3)
- [CVE-2006-2965](https://insights.sbomify.com/CVE-2006-2965/): Cross-site scripting in particle soft:particle whois (medium 4.3)
- [CVE-2006-2964](https://insights.sbomify.com/CVE-2006-2964/): Code injection in xtreme scripts:download manager (high 7.5)
- [CVE-2006-2963](https://insights.sbomify.com/CVE-2006-2963/): Cross-site scripting in it-direkt:cabacos web cms (medium 4.3)
- [CVE-2006-2962](https://insights.sbomify.com/CVE-2006-2962/): Code injection in oxfam australia:emergencies personnel information system (high 7.5)
- [CVE-2006-2961](https://insights.sbomify.com/CVE-2006-2961/): Memory corruption in aclogic:cesarftp (high 7.5)
- [CVE-2006-2960](https://insights.sbomify.com/CVE-2006-2960/): Code injection in joomla:joomla (high 7.5)
- [CVE-2006-2959](https://insights.sbomify.com/CVE-2006-2959/): SQL injection in snitz communications:snitz forums 2000 (high 7.5)
- [CVE-2006-2958](https://insights.sbomify.com/CVE-2006-2958/): Path traversal in filzip:filzip (low 2.6)
- [CVE-2006-2957](https://insights.sbomify.com/CVE-2006-2957/): Cross-site scripting in skoom:i.list (medium 4.3)
- [CVE-2006-2956](https://insights.sbomify.com/CVE-2006-2956/): Cross-site scripting in skoom:i.list (medium 4.3)
- [CVE-2006-2955](https://insights.sbomify.com/CVE-2006-2955/): Cross-site scripting in kaphotoservice:kaphotoservice (medium 4.3)
- [CVE-2006-2954](https://insights.sbomify.com/CVE-2006-2954/): SQL injection in primoris software:officeflow (high 7.5)
- [CVE-2006-2953](https://insights.sbomify.com/CVE-2006-2953/): Cross-site scripting in primoris software:officeflow (medium 4.3)
- [CVE-2006-2952](https://insights.sbomify.com/CVE-2006-2952/): Path traversal in net portal dynamic system:net portal dynamic system (medium 5.0)
- [CVE-2006-2951](https://insights.sbomify.com/CVE-2006-2951/): Cross-site scripting in npds:npds (medium 6.8)
- [CVE-2006-2950](https://insights.sbomify.com/CVE-2006-2950/): Information disclosure in npds:npds (medium 5.0)
- [CVE-2006-2949](https://insights.sbomify.com/CVE-2006-2949/): Cross-site scripting in mybulletinboard:mybulletinboard (medium 6.8)
- [CVE-2006-2948](https://insights.sbomify.com/CVE-2006-2948/): Information disclosure in alan ward:a-cart (medium 5.0)
- [CVE-2006-2947](https://insights.sbomify.com/CVE-2006-2947/): Information disclosure in dmx forum:dmx forum (medium 5.0)
- [CVE-2006-2946](https://insights.sbomify.com/CVE-2006-2946/): Information disclosure in dmx forum:dmx forum (medium 5.0)
- [CVE-2006-2945](https://insights.sbomify.com/CVE-2006-2945/): Missing authorization in andreas gohr:dokuwiki (medium 4.0)
- [CVE-2006-2944](https://insights.sbomify.com/CVE-2006-2944/): Other in cgi-rescue:form2mail (medium 5.0)
- [CVE-2006-2943](https://insights.sbomify.com/CVE-2006-2943/): Other in cgi-rescue:webform (high 7.5)
- [CVE-2006-2942](https://insights.sbomify.com/CVE-2006-2942/): Privilege escalation in twiki:twiki (medium 5.1)
- [CVE-2006-2941](https://insights.sbomify.com/CVE-2006-2941/): Denial of service in gnu:mailman (medium 5.0)
- [CVE-2006-2940](https://insights.sbomify.com/CVE-2006-2940/): Denial of service in openssl:openssl (high 7.8)
- [CVE-2006-2937](https://insights.sbomify.com/CVE-2006-2937/): Denial of service in openssl:openssl (high 7.8)
- [CVE-2006-2936](https://insights.sbomify.com/CVE-2006-2936/): Denial of service in linux:linux kernel (high 7.8)
- [CVE-2006-2935](https://insights.sbomify.com/CVE-2006-2935/): Memory corruption in canonical:ubuntu linux (medium 4.6)
- [CVE-2006-2934](https://insights.sbomify.com/CVE-2006-2934/): Null dereference in linux:linux kernel (medium 5.0)
- [CVE-2006-2933](https://insights.sbomify.com/CVE-2006-2933/): Security feature bypass in kde:kde (medium 4.6)
- [CVE-2006-2932](https://insights.sbomify.com/CVE-2006-2932/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2006-2931](https://insights.sbomify.com/CVE-2006-2931/): File upload in hotwebscripts:cms mundo (medium 5.1)
- [CVE-2006-2930](https://insights.sbomify.com/CVE-2006-2930/): Auth bypass in sun:grid engine (medium 4.6)
- [CVE-2006-2929](https://insights.sbomify.com/CVE-2006-2929/): Code injection in openemr:openemr (medium 6.8)
- [CVE-2006-2928](https://insights.sbomify.com/CVE-2006-2928/): Code injection in cms-bandits:cms-bandits (medium 5.1)
- [CVE-2006-2927](https://insights.sbomify.com/CVE-2006-2927/): Cross-site scripting in xfairguy:codeavalanche freeforum (medium 4.3)
- [CVE-2006-2926](https://insights.sbomify.com/CVE-2006-2926/): Memory corruption in qbik:wingate (high 7.5)
- [CVE-2006-2925](https://insights.sbomify.com/CVE-2006-2925/): Cross-site scripting in ingate:ingate firewall (medium 4.0)
- [CVE-2006-2924](https://insights.sbomify.com/CVE-2006-2924/): Denial of service in ingate:ingate firewall (medium 5.0)
- [CVE-2006-2923](https://insights.sbomify.com/CVE-2006-2923/): Memory corruption in loudhush:loudhush (medium 6.4)
- [CVE-2006-2922](https://insights.sbomify.com/CVE-2006-2922/): Code injection in miraks:miraksgalerie (medium 5.1)
- [CVE-2006-2921](https://insights.sbomify.com/CVE-2006-2921/): Code injection in cmpro team:clan manager pro (medium 5.1)
- [CVE-2006-2920](https://insights.sbomify.com/CVE-2006-2920/): Security feature bypass in sylpheed-claws:sylpheed-claws (low 2.6)
- [CVE-2006-2919](https://insights.sbomify.com/CVE-2006-2919/): Memory corruption in microsoft:netmeeting (high 7.8)
- [CVE-2006-2918](https://insights.sbomify.com/CVE-2006-2918/): Security feature bypass in lanap botdetect:captcha asp.net (medium 5.0)
- [CVE-2006-2917](https://insights.sbomify.com/CVE-2006-2917/): Path traversal in qbik:wingate (medium 5.5)
- [CVE-2006-2916](https://insights.sbomify.com/CVE-2006-2916/): Privilege escalation in kde:arts (high 7.8)
- [CVE-2006-2915](https://insights.sbomify.com/CVE-2006-2915/): SQL injection in deluxebb:deluxebb (medium 5.1)
- [CVE-2006-2914](https://insights.sbomify.com/CVE-2006-2914/): Code injection in deluxebb:deluxebb (medium 5.1)
- [CVE-2006-2913](https://insights.sbomify.com/CVE-2006-2913/): Cross-site scripting in out of the trees web design:selectapix (low 2.6)
- [CVE-2006-2912](https://insights.sbomify.com/CVE-2006-2912/): SQL injection in out of the trees web design:selectapix (high 7.5)
- [CVE-2006-2911](https://insights.sbomify.com/CVE-2006-2911/): SQL injection in hotwebscripts:cms mundo (high 7.5)
- [CVE-2006-2910](https://insights.sbomify.com/CVE-2006-2910/): Memory corruption in cowon america:jetaudio (medium 5.1)
- [CVE-2006-2909](https://insights.sbomify.com/CVE-2006-2909/): Memory corruption in picozip:picozip (high 7.5)
- [CVE-2006-2908](https://insights.sbomify.com/CVE-2006-2908/): Code injection in mybulletinboard:mybulletinboard (high 7.5)
- [CVE-2006-2906](https://insights.sbomify.com/CVE-2006-2906/): Denial of service in thomas boutell:graphics draw library (medium 5.4)
- [CVE-2006-2905](https://insights.sbomify.com/CVE-2006-2905/): Information disclosure in particle soft:particle links (medium 5.0)
- [CVE-2006-2904](https://insights.sbomify.com/CVE-2006-2904/): SQL injection in particle soft:particle links (high 7.5)
- [CVE-2006-2903](https://insights.sbomify.com/CVE-2006-2903/): Cross-site scripting in particle soft:particle links (low 2.6)
- [CVE-2006-2902](https://insights.sbomify.com/CVE-2006-2902/): Path traversal in particle soft:particle links (medium 5.0)
- [CVE-2006-2901](https://insights.sbomify.com/CVE-2006-2901/): Information disclosure in d-link:dwl-2100ap (medium 5.0)
- [CVE-2006-2900](https://insights.sbomify.com/CVE-2006-2900/): Information disclosure in canon:network camera server vb101 (medium 4.0)
- [CVE-2006-2899](https://insights.sbomify.com/CVE-2006-2899/): File upload in estsoft:internetdisk (medium 6.5)
- [CVE-2006-2898](https://insights.sbomify.com/CVE-2006-2898/): Memory corruption in digium:asterisk (high 7.5)
- [CVE-2006-2897](https://insights.sbomify.com/CVE-2006-2897/): Cross-site scripting in funkboard:funkboard (low 2.6)
- [CVE-2006-2896](https://insights.sbomify.com/CVE-2006-2896/): Missing authorization in funkboard:funkboard (medium 5.0)
- [CVE-2006-2895](https://insights.sbomify.com/CVE-2006-2895/): Cross-site scripting in mediawiki:mediawiki (low 2.6)
- [CVE-2006-2894](https://insights.sbomify.com/CVE-2006-2894/): Information disclosure in mozilla:firefox (medium 4.0)
- [CVE-2006-2893](https://insights.sbomify.com/CVE-2006-2893/): Information disclosure in gantty:gantty (medium 5.0)
- [CVE-2006-2892](https://insights.sbomify.com/CVE-2006-2892/): Cross-site scripting in gantty:gantty (medium 4.3)
- [CVE-2006-2891](https://insights.sbomify.com/CVE-2006-2891/): Cross-site scripting in pixelpost:pixelpost (low 2.6)
- [CVE-2006-2890](https://insights.sbomify.com/CVE-2006-2890/): Auth bypass in pixelpost:pixelpost (medium 5.1)
- [CVE-2006-2889](https://insights.sbomify.com/CVE-2006-2889/): SQL injection in pixelpost:pixelpost (medium 5.1)
- [CVE-2006-2888](https://insights.sbomify.com/CVE-2006-2888/): Code injection in wikiwig:wikiwig (high 7.5)
- [CVE-2006-2887](https://insights.sbomify.com/CVE-2006-2887/): SQL injection in aspburst:mynewsletter (high 7.5)
- [CVE-2006-2886](https://insights.sbomify.com/CVE-2006-2886/): Information disclosure in jam warehouse:knowledgetree open source (medium 4.3)
- [CVE-2006-2885](https://insights.sbomify.com/CVE-2006-2885/): Cross-site scripting in knowledgetree:knowledgetree (medium 4.3)
- [CVE-2006-2884](https://insights.sbomify.com/CVE-2006-2884/): SQL injection in kke info media:kmita faq (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/42/