# Vulnerabilities published in 2006


- [CVE-2006-2883](https://insights.sbomify.com/CVE-2006-2883/): Cross-site scripting in kke info media:kmita faq (medium 4.3)
- [CVE-2006-2882](https://insights.sbomify.com/CVE-2006-2882/): Cross-site scripting in aspscriptz:aspscriptz guest book (medium 4.3)
- [CVE-2006-2881](https://insights.sbomify.com/CVE-2006-2881/): Code injection in dreamcost:dreamaccount (medium 5.1)
- [CVE-2006-2880](https://insights.sbomify.com/CVE-2006-2880/): Cross-site scripting in pyblosxom:pyblosxom (medium 6.8)
- [CVE-2006-2879](https://insights.sbomify.com/CVE-2006-2879/): SQL injection in alex:news-engine (high 7.5)
- [CVE-2006-2878](https://insights.sbomify.com/CVE-2006-2878/): Code injection in andreas gohr:dokuwiki (high 7.5)
- [CVE-2006-2877](https://insights.sbomify.com/CVE-2006-2877/): Code injection in sangwan kim:bookmark4u (high 7.5)
- [CVE-2006-2876](https://insights.sbomify.com/CVE-2006-2876/): Cross-site scripting in deltascripts:php pro publish (medium 6.8)
- [CVE-2006-2875](https://insights.sbomify.com/CVE-2006-2875/): Memory corruption in id software:quake 3 engine (high 7.5)
- [CVE-2006-2874](https://insights.sbomify.com/CVE-2006-2874/): Cross-site scripting in osads alliance database:osads alliance database (medium 4.3)
- [CVE-2006-2873](https://insights.sbomify.com/CVE-2006-2873/): Cross-site scripting in enigma haber:enigma haber (medium 4.3)
- [CVE-2006-2872](https://insights.sbomify.com/CVE-2006-2872/): Code injection in rumble:rumble (high 7.5)
- [CVE-2006-2871](https://insights.sbomify.com/CVE-2006-2871/): Code injection in cyboards:cyboards php lite (high 7.5)
- [CVE-2006-2870](https://insights.sbomify.com/CVE-2006-2870/): Cross-site scripting in intelligent solutions:asp discussion forum (medium 4.3)
- [CVE-2006-2869](https://insights.sbomify.com/CVE-2006-2869/): Other in alwil:avast antivirus (critical 10.0)
- [CVE-2006-2868](https://insights.sbomify.com/CVE-2006-2868/): Code injection in claroline:claroline (medium 5.1)
- [CVE-2006-2867](https://insights.sbomify.com/CVE-2006-2867/): SQL injection in coolforum:coolforum (high 7.5)
- [CVE-2006-2866](https://insights.sbomify.com/CVE-2006-2866/): Code injection in dotclear:dotclear (medium 5.1)
- [CVE-2006-2865](https://insights.sbomify.com/CVE-2006-2865/): Code injection in phpbb group:phpbb (high 7.5)
- [CVE-2006-2864](https://insights.sbomify.com/CVE-2006-2864/): Code injection in blueshoes:blueshoes framework (medium 5.1)
- [CVE-2006-2863](https://insights.sbomify.com/CVE-2006-2863/): Code injection in cs-cart:cs-cart (medium 5.1)
- [CVE-2006-2862](https://insights.sbomify.com/CVE-2006-2862/): SQL injection in particle soft:particle gallery (high 7.5)
- [CVE-2006-2861](https://insights.sbomify.com/CVE-2006-2861/): SQL injection in particle soft:particle wiki (high 7.5)
- [CVE-2006-2860](https://insights.sbomify.com/CVE-2006-2860/): Code injection in webspot:webspotblogging (medium 6.4)
- [CVE-2006-2859](https://insights.sbomify.com/CVE-2006-2859/): Code injection in mywebland:mybloggie (high 7.5)
- [CVE-2006-2858](https://insights.sbomify.com/CVE-2006-2858/): SQL injection in locazo:locazolist classifieds (high 7.5)
- [CVE-2006-2857](https://insights.sbomify.com/CVE-2006-2857/): SQL injection in lifetype:lifetype (high 7.5)
- [CVE-2006-2856](https://insights.sbomify.com/CVE-2006-2856/): Misconfiguration in activestate:activeperl (medium 4.6)
- [CVE-2006-2855](https://insights.sbomify.com/CVE-2006-2855/): SQL injection in xuebook:xuebook (high 7.5)
- [CVE-2006-2854](https://insights.sbomify.com/CVE-2006-2854/): SQL injection in ibwd:ibwd guestbook (high 7.5)
- [CVE-2006-2853](https://insights.sbomify.com/CVE-2006-2853/): SQL injection in abarcar:abarcar realty portal (high 7.5)
- [CVE-2006-2852](https://insights.sbomify.com/CVE-2006-2852/): Code injection in dotwidget:dotwidget cms (medium 6.8)
- [CVE-2006-2851](https://insights.sbomify.com/CVE-2006-2851/): Cross-site scripting in dotproject:dotproject (medium 4.3)
- [CVE-2006-2850](https://insights.sbomify.com/CVE-2006-2850/): Cross-site scripting in php labware:labwiki (medium 4.3)
- [CVE-2006-2849](https://insights.sbomify.com/CVE-2006-2849/): Code injection in andrew godwin:bytehoard (high 7.5)
- [CVE-2006-2848](https://insights.sbomify.com/CVE-2006-2848/): Missing authorization in full revolution:aspweblinks (medium 5.0)
- [CVE-2006-2847](https://insights.sbomify.com/CVE-2006-2847/): SQL injection in full revolution:aspweblinks (high 7.5)
- [CVE-2006-2846](https://insights.sbomify.com/CVE-2006-2846/): Cross-site scripting in visiongate:visiongate portal system (medium 4.3)
- [CVE-2006-2845](https://insights.sbomify.com/CVE-2006-2845/): Code injection in redaxo:redaxo (high 7.5)
- [CVE-2006-2844](https://insights.sbomify.com/CVE-2006-2844/): Code injection in redaxo:redaxo (high 7.5)
- [CVE-2006-2843](https://insights.sbomify.com/CVE-2006-2843/): Code injection in redaxo:redaxo (high 7.5)
- [CVE-2006-2842](https://insights.sbomify.com/CVE-2006-2842/): Code injection in squirrelmail:squirrelmail (high 7.5)
- [CVE-2006-2841](https://insights.sbomify.com/CVE-2006-2841/): Code injection in associated:associated cms (high 7.5)
- [CVE-2006-2840](https://insights.sbomify.com/CVE-2006-2840/): Cross-site scripting in pmwiki:pmwiki (medium 6.8)
- [CVE-2006-2839](https://insights.sbomify.com/CVE-2006-2839/): Path traversal in webwork:webwork (medium 6.4)
- [CVE-2006-2838](https://insights.sbomify.com/CVE-2006-2838/): Memory corruption in f-secure:f-secure anti-virus (high 7.6)
- [CVE-2006-2837](https://insights.sbomify.com/CVE-2006-2837/): Cross-site scripting in techno dreams:techno dreams guest book (medium 4.3)
- [CVE-2006-2836](https://insights.sbomify.com/CVE-2006-2836/): SQL injection in pineapple technologies:lore (high 7.5)
- [CVE-2006-2835](https://insights.sbomify.com/CVE-2006-2835/): SQL injection in arabless:saphplesson (high 7.5)
- [CVE-2006-2834](https://insights.sbomify.com/CVE-2006-2834/): Code injection in gnopaste:gnopaste (high 7.5)
- [CVE-2006-2833](https://insights.sbomify.com/CVE-2006-2833/): Cross-site scripting in drupal:drupal (low 2.6)
- [CVE-2006-2832](https://insights.sbomify.com/CVE-2006-2832/): Cross-site scripting in drupal:drupal (low 2.6)
- [CVE-2006-2831](https://insights.sbomify.com/CVE-2006-2831/): File upload in drupal:drupal (high 7.5)
- [CVE-2006-2830](https://insights.sbomify.com/CVE-2006-2830/): Memory corruption in tibco:hawk (high 7.5)
- [CVE-2006-2829](https://insights.sbomify.com/CVE-2006-2829/): Memory corruption in tibco:hawk (medium 6.8)
- [CVE-2006-2828](https://insights.sbomify.com/CVE-2006-2828/): Code injection in php-nuke:ev (medium 6.4)
- [CVE-2006-2827](https://insights.sbomify.com/CVE-2006-2827/): SQL injection in qualiteam:x-cart (critical 9.8)
- [CVE-2006-2826](https://insights.sbomify.com/CVE-2006-2826/): SQL injection in phplib team:phplib (high 7.5)
- [CVE-2006-2825](https://insights.sbomify.com/CVE-2006-2825/): Security feature bypass in cpanel:cpanel (medium 5.1)
- [CVE-2006-2824](https://insights.sbomify.com/CVE-2006-2824/): SQL injection in logicalware:mailmanager (high 7.5)
- [CVE-2006-2823](https://insights.sbomify.com/CVE-2006-2823/): Information disclosure in a.shopkart:a.shopkart (medium 5.0)
- [CVE-2006-2822](https://insights.sbomify.com/CVE-2006-2822/): SQL injection in xfairguy:codeavalanche freeforum (high 7.5)
- [CVE-2006-2821](https://insights.sbomify.com/CVE-2006-2821/): Cross-site scripting in deltascripts:pro publish (medium 6.8)
- [CVE-2006-2820](https://insights.sbomify.com/CVE-2006-2820/): Cross-site scripting in hotwebscripts:weblog oggi (medium 4.3)
- [CVE-2006-2819](https://insights.sbomify.com/CVE-2006-2819/): Code injection in barnraiser:igloo (high 7.5)
- [CVE-2006-2818](https://insights.sbomify.com/CVE-2006-2818/): Code injection in cameron mckay:informium (high 7.5)
- [CVE-2006-2817](https://insights.sbomify.com/CVE-2006-2817/): SQL injection in tekno.portal:tekno.portal (high 7.5)
- [CVE-2006-2816](https://insights.sbomify.com/CVE-2006-2816/): Cross-site scripting in coolphp:coolphp magazine (medium 4.3)
- [CVE-2006-2815](https://insights.sbomify.com/CVE-2006-2815/): Cross-site scripting in two shoes mambo factory:simpleboard (medium 6.8)
- [CVE-2006-2814](https://insights.sbomify.com/CVE-2006-2814/): Memory corruption in ishopcart:ishopcart (high 7.5)
- [CVE-2006-2813](https://insights.sbomify.com/CVE-2006-2813/): Path traversal in ishopcart:ishopcart (high 7.8)
- [CVE-2006-2812](https://insights.sbomify.com/CVE-2006-2812/): Cross-site scripting in dominios europa:picrate (medium 6.8)
- [CVE-2006-2811](https://insights.sbomify.com/CVE-2006-2811/): Code injection in cantico:ovidentia (high 7.5)
- [CVE-2006-2810](https://insights.sbomify.com/CVE-2006-2810/): Cross-site scripting in belchior foundry:vcard (medium 6.8)
- [CVE-2006-2809](https://insights.sbomify.com/CVE-2006-2809/): Cross-site scripting in ar-blog:ar-blog (medium 6.8)
- [CVE-2006-2808](https://insights.sbomify.com/CVE-2006-2808/): Cross-site scripting in lycos:htmlgear guestgear (medium 6.8)
- [CVE-2006-2807](https://insights.sbomify.com/CVE-2006-2807/): Missing authorization in aspwebsoft:speedy asp discussion forum (critical 10.0)
- [CVE-2006-2806](https://insights.sbomify.com/CVE-2006-2806/): Denial of service in apache:james (high 7.8)
- [CVE-2006-2805](https://insights.sbomify.com/CVE-2006-2805/): SQL injection in jelsoft:vbulletin (medium 5.0)
- [CVE-2006-2804](https://insights.sbomify.com/CVE-2006-2804/): Cross-site scripting in goss:icm (medium 6.8)
- [CVE-2006-2803](https://insights.sbomify.com/CVE-2006-2803/): Cross-site scripting in deltascripts:php manualmaker (medium 6.8)
- [CVE-2006-2802](https://insights.sbomify.com/CVE-2006-2802/): Memory corruption in xine:gxine (medium 5.0)
- [CVE-2006-2801](https://insights.sbomify.com/CVE-2006-2801/): SQL injection in unak:unak cms (high 7.5)
- [CVE-2006-2800](https://insights.sbomify.com/CVE-2006-2800/): Cross-site scripting in unak:unak cms (medium 6.8)
- [CVE-2006-2799](https://insights.sbomify.com/CVE-2006-2799/): Cross-site scripting in toenda software development:toendacms (medium 6.8)
- [CVE-2006-2798](https://insights.sbomify.com/CVE-2006-2798/): Cross-site scripting in phpcommunitycalendar:phpcommunitycalendar (medium 6.8)
- [CVE-2006-2797](https://insights.sbomify.com/CVE-2006-2797/): SQL injection in phpcommunitycalendar:phpcommunitycalendar (high 7.5)
- [CVE-2006-2796](https://insights.sbomify.com/CVE-2006-2796/): Cross-site scripting in new-place:captivate (medium 6.8)
- [CVE-2006-2795](https://insights.sbomify.com/CVE-2006-2795/): Cross-site scripting in xiti:xiti tracking script (medium 6.8)
- [CVE-2006-2794](https://insights.sbomify.com/CVE-2006-2794/): Missing authorization in aspsitem:aspsitem (high 7.8)
- [CVE-2006-2793](https://insights.sbomify.com/CVE-2006-2793/): SQL injection in aspsitem:aspsitem (high 7.5)
- [CVE-2006-2792](https://insights.sbomify.com/CVE-2006-2792/): SQL injection in woltlab:burning board (high 7.5)
- [CVE-2006-2791](https://insights.sbomify.com/CVE-2006-2791/): Path traversal in net art media:iboutique.mall (medium 5.0)
- [CVE-2006-2790](https://insights.sbomify.com/CVE-2006-2790/): Misconfiguration in sun:storage automated diagnostic environment (high 7.2)
- [CVE-2006-2789](https://insights.sbomify.com/CVE-2006-2789/): Null dereference in gnome:evolution (low 2.6)
- [CVE-2006-2788](https://insights.sbomify.com/CVE-2006-2788/): Memory corruption in mozilla:firefox (high 7.5)
- [CVE-2006-2787](https://insights.sbomify.com/CVE-2006-2787/): Security feature bypass in mozilla:firefox (critical 9.3)
- [CVE-2006-2786](https://insights.sbomify.com/CVE-2006-2786/): Other in mozilla:firefox (low 2.6)
- [CVE-2006-2785](https://insights.sbomify.com/CVE-2006-2785/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2006-2784](https://insights.sbomify.com/CVE-2006-2784/): Code injection in mozilla:firefox (medium 5.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/43/