# Vulnerabilities published in 2006


- [CVE-2006-2783](https://insights.sbomify.com/CVE-2006-2783/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2006-2782](https://insights.sbomify.com/CVE-2006-2782/): Information disclosure in mozilla:firefox (medium 4.3)
- [CVE-2006-2781](https://insights.sbomify.com/CVE-2006-2781/): Memory corruption in mozilla:seamonkey (medium 6.4)
- [CVE-2006-2780](https://insights.sbomify.com/CVE-2006-2780/): Integer overflow in mozilla:firefox (critical 9.3)
- [CVE-2006-2779](https://insights.sbomify.com/CVE-2006-2779/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2006-2778](https://insights.sbomify.com/CVE-2006-2778/): Memory corruption in mozilla:firefox (medium 5.0)
- [CVE-2006-2777](https://insights.sbomify.com/CVE-2006-2777/): Code injection in mozilla:firefox (high 7.5)
- [CVE-2006-2776](https://insights.sbomify.com/CVE-2006-2776/): Code injection in mozilla:firefox (high 7.5)
- [CVE-2006-2775](https://insights.sbomify.com/CVE-2006-2775/): Security feature bypass in mozilla:firefox (high 7.5)
- [CVE-2006-2774](https://insights.sbomify.com/CVE-2006-2774/): Cross-site scripting in qontentone:qontentone cms (medium 6.8)
- [CVE-2006-2773](https://insights.sbomify.com/CVE-2006-2773/): Missing authorization in hogstorps:hogstorp guestbook (medium 6.4)
- [CVE-2006-2772](https://insights.sbomify.com/CVE-2006-2772/): Cross-site scripting in hogstorps:hogstorp guestbook (medium 6.8)
- [CVE-2006-2771](https://insights.sbomify.com/CVE-2006-2771/): Missing authorization in hogstorps:hogstorp guestbook (medium 6.4)
- [CVE-2006-2770](https://insights.sbomify.com/CVE-2006-2770/): Path traversal in pppblog:pppblog (medium 5.4)
- [CVE-2006-2769](https://insights.sbomify.com/CVE-2006-2769/): Security feature bypass in sourcefire:snort (medium 5.0)
- [CVE-2006-2768](https://insights.sbomify.com/CVE-2006-2768/): Code injection in ipw systems:metajour (medium 5.1)
- [CVE-2006-2767](https://insights.sbomify.com/CVE-2006-2767/): Code injection in ottoman:ottoman (medium 5.1)
- [CVE-2006-2766](https://insights.sbomify.com/CVE-2006-2766/): Memory corruption in microsoft:ie (low 2.6)
- [CVE-2006-2765](https://insights.sbomify.com/CVE-2006-2765/): Cross-site scripting in interlink advantage:interlink advantage (low 2.6)
- [CVE-2006-2764](https://insights.sbomify.com/CVE-2006-2764/): Cross-site scripting in xander ladage:guestbookxl (medium 4.3)
- [CVE-2006-2763](https://insights.sbomify.com/CVE-2006-2763/): SQL injection in pre projects:pre news manager (medium 6.4)
- [CVE-2006-2762](https://insights.sbomify.com/CVE-2006-2762/): Code injection in webcalendar:webcalendar (medium 6.4)
- [CVE-2006-2761](https://insights.sbomify.com/CVE-2006-2761/): SQL injection in hitachi:hitsenser3 (medium 6.4)
- [CVE-2006-2760](https://insights.sbomify.com/CVE-2006-2760/): SQL injection in warpspeed:4nforum (high 7.5)
- [CVE-2006-2759](https://insights.sbomify.com/CVE-2006-2759/): Improper Input Validation in Mortbay Jetty (medium 5.0)
- [CVE-2006-2758](https://insights.sbomify.com/CVE-2006-2758/): Jetty Directory Traversal Vulnerability (medium 5.0)
- [CVE-2006-2757](https://insights.sbomify.com/CVE-2006-2757/): Cross-site scripting in chipmunk scripts:chipmunk guestbook (medium 4.3)
- [CVE-2006-2756](https://insights.sbomify.com/CVE-2006-2756/): Denial of service in eitsop:my web server (medium 5.0)
- [CVE-2006-2755](https://insights.sbomify.com/CVE-2006-2755/): Cross-site scripting in ubbcentral:ubb.threads (medium 4.3)
- [CVE-2006-2754](https://insights.sbomify.com/CVE-2006-2754/): Memory corruption in openldap:openldap (medium 5.0)
- [CVE-2006-2753](https://insights.sbomify.com/CVE-2006-2753/): SQL injection in mysql:mysql (high 7.5)
- [CVE-2006-2752](https://insights.sbomify.com/CVE-2006-2752/): Misconfiguration in suse:suse linux (medium 6.4)
- [CVE-2006-2751](https://insights.sbomify.com/CVE-2006-2751/): Cross-site scripting in open searchable image catalogue:open searchable image catalogue (medium 4.3)
- [CVE-2006-2750](https://insights.sbomify.com/CVE-2006-2750/): Cross-site scripting in open searchable image catalogue:open searchable image catalogue (medium 4.3)
- [CVE-2006-2749](https://insights.sbomify.com/CVE-2006-2749/): SQL injection in open searchable image catalogue:open searchable image catalogue (medium 6.4)
- [CVE-2006-2748](https://insights.sbomify.com/CVE-2006-2748/): SQL injection in open searchable image catalogue:open searchable image catalogue (medium 6.4)
- [CVE-2006-2747](https://insights.sbomify.com/CVE-2006-2747/): Path traversal in fredi bach:phpmydesktop arcade (medium 5.1)
- [CVE-2006-2746](https://insights.sbomify.com/CVE-2006-2746/): Cross-site scripting in facile interactive web:facile interactive web (medium 6.8)
- [CVE-2006-2745](https://insights.sbomify.com/CVE-2006-2745/): Code injection in facile interactive web:facile interactive web (medium 5.1)
- [CVE-2006-2744](https://insights.sbomify.com/CVE-2006-2744/): Code injection in facile interactive web:facile interactive web (high 7.5)
- [CVE-2006-2743](https://insights.sbomify.com/CVE-2006-2743/): File upload in drupal:drupal (medium 5.1)
- [CVE-2006-2742](https://insights.sbomify.com/CVE-2006-2742/): SQL injection in drupal:drupal (high 7.5)
- [CVE-2006-2741](https://insights.sbomify.com/CVE-2006-2741/): Cross-site scripting in epic designs:tinybb (medium 6.8)
- [CVE-2006-2740](https://insights.sbomify.com/CVE-2006-2740/): SQL injection in epic designs:tinybb (medium 6.8)
- [CVE-2006-2739](https://insights.sbomify.com/CVE-2006-2739/): Code injection in epic designs:tinybb (medium 5.1)
- [CVE-2006-2738](https://insights.sbomify.com/CVE-2006-2738/): Hardcoded credentials in open-xchange:open-xchange (high 7.5)
- [CVE-2006-2737](https://insights.sbomify.com/CVE-2006-2737/): Missing authorization in nukedit:nukedit (high 7.5)
- [CVE-2006-2736](https://insights.sbomify.com/CVE-2006-2736/): Code injection in phpbb-portal:blend portal (medium 5.1)
- [CVE-2006-2735](https://insights.sbomify.com/CVE-2006-2735/): Code injection in activity mod plus:activity mod plus (medium 5.1)
- [CVE-2006-2734](https://insights.sbomify.com/CVE-2006-2734/): Auth bypass in mini-nuke:mini-nuke (medium 5.0)
- [CVE-2006-2733](https://insights.sbomify.com/CVE-2006-2733/): Business logic in mini-nuke:mini-nuke (medium 5.0)
- [CVE-2006-2732](https://insights.sbomify.com/CVE-2006-2732/): SQL injection in mini-nuke:mini-nuke (high 7.5)
- [CVE-2006-2731](https://insights.sbomify.com/CVE-2006-2731/): SQL injection in enigma haber:enigma haber (high 7.5)
- [CVE-2006-2730](https://insights.sbomify.com/CVE-2006-2730/): Code injection in hot open tickets:hot open tickets (medium 5.1)
- [CVE-2006-2729](https://insights.sbomify.com/CVE-2006-2729/): Cross-site scripting in jan chmelik:photoalbum bandw (low 2.6)
- [CVE-2006-2728](https://insights.sbomify.com/CVE-2006-2728/): Cross-site scripting in jan chmelik:photoalbum bandw (low 2.6)
- [CVE-2006-2727](https://insights.sbomify.com/CVE-2006-2727/): Business logic in epic designs:eggblog (high 7.5)
- [CVE-2006-2726](https://insights.sbomify.com/CVE-2006-2726/): Code injection in fastpublish:fastpublish cms (high 7.5)
- [CVE-2006-2725](https://insights.sbomify.com/CVE-2006-2725/): SQL injection in epic designs:eggblog (medium 6.4)
- [CVE-2006-2724](https://insights.sbomify.com/CVE-2006-2724/): Cross-site scripting in punbb:punbb (medium 6.8)
- [CVE-2006-2723](https://insights.sbomify.com/CVE-2006-2723/): Denial of service in mozilla:firefox (medium 5.0)
- [CVE-2006-2722](https://insights.sbomify.com/CVE-2006-2722/): SQL injection in out of the trees web design:selectapix (high 7.5)
- [CVE-2006-2721](https://insights.sbomify.com/CVE-2006-2721/): Cross-site scripting in variomat:variomat (medium 6.8)
- [CVE-2006-2720](https://insights.sbomify.com/CVE-2006-2720/): SQL injection in variomat:variomat (high 7.5)
- [CVE-2006-2719](https://insights.sbomify.com/CVE-2006-2719/): Information disclosure in jiwa:financials (medium 4.9)
- [CVE-2006-2718](https://insights.sbomify.com/CVE-2006-2718/): Information disclosure in jiwa:financials (medium 6.5)
- [CVE-2006-2717](https://insights.sbomify.com/CVE-2006-2717/): Path traversal in secure elements:c5 enterprise vulnerability management (medium 4.0)
- [CVE-2006-2716](https://insights.sbomify.com/CVE-2006-2716/): Hardcoded credentials in secure elements:c5 enterprise vulnerability management (high 7.5)
- [CVE-2006-2715](https://insights.sbomify.com/CVE-2006-2715/): Missing authorization in secure elements:c5 enterprise vulnerability management (high 7.5)
- [CVE-2006-2714](https://insights.sbomify.com/CVE-2006-2714/): Auth bypass in secure elements:c5 enterprise vulnerability management (medium 5.0)
- [CVE-2006-2713](https://insights.sbomify.com/CVE-2006-2713/): Weak cryptography in secure elements:c5 enterprise vulnerability management (medium 5.0)
- [CVE-2006-2712](https://insights.sbomify.com/CVE-2006-2712/): Weak cryptography in secure elements:class 5 enterprise vulnerability management (medium 5.0)
- [CVE-2006-2711](https://insights.sbomify.com/CVE-2006-2711/): Weak cryptography in secure elements:class 5 enterprise vulnerability management (medium 5.0)
- [CVE-2006-2710](https://insights.sbomify.com/CVE-2006-2710/): Hardcoded credentials in secure elements:class 5 enterprise vulnerability management (medium 5.0)
- [CVE-2006-2709](https://insights.sbomify.com/CVE-2006-2709/): Security feature bypass in secure elements:class 5 enterprise vulnerability management (medium 5.0)
- [CVE-2006-2708](https://insights.sbomify.com/CVE-2006-2708/): Memory corruption in secure elements:class 5 enterprise vulnerability management (medium 5.0)
- [CVE-2006-2707](https://insights.sbomify.com/CVE-2006-2707/): Security feature bypass in secure elements:class 5 enterprise vulnerability management (medium 5.0)
- [CVE-2006-2706](https://insights.sbomify.com/CVE-2006-2706/): Denial of service in secure elements:class 5 enterprise vulnerability management (medium 5.0)
- [CVE-2006-2705](https://insights.sbomify.com/CVE-2006-2705/): Denial of service in secure elements:c5 enterprise vulnerability management (medium 5.0)
- [CVE-2006-2704](https://insights.sbomify.com/CVE-2006-2704/): Information disclosure in secure elements:c5 enterprise vulnerability management (medium 5.0)
- [CVE-2006-2703](https://insights.sbomify.com/CVE-2006-2703/): Security feature bypass in suse:suse linux (medium 5.0)
- [CVE-2006-2702](https://insights.sbomify.com/CVE-2006-2702/): Security feature bypass in wordpress:wordpress (medium 5.0)
- [CVE-2006-2701](https://insights.sbomify.com/CVE-2006-2701/): SQL injection in geeklog:geeklog (high 7.5)
- [CVE-2006-2700](https://insights.sbomify.com/CVE-2006-2700/): SQL injection in geeklog:geeklog (medium 5.1)
- [CVE-2006-2699](https://insights.sbomify.com/CVE-2006-2699/): Cross-site scripting in geeklog:geeklog (medium 6.8)
- [CVE-2006-2698](https://insights.sbomify.com/CVE-2006-2698/): Information disclosure in geeklog:geeklog (high 7.8)
- [CVE-2006-2697](https://insights.sbomify.com/CVE-2006-2697/): SQL injection in easy-content forums:easy-content forums (medium 6.4)
- [CVE-2006-2696](https://insights.sbomify.com/CVE-2006-2696/): Cross-site scripting in easy-content forums:easy-content forums (medium 6.8)
- [CVE-2006-2695](https://insights.sbomify.com/CVE-2006-2695/): File upload in dgnews:dgnews (medium 5.1)
- [CVE-2006-2694](https://insights.sbomify.com/CVE-2006-2694/): Code injection in scriptscenter:ezupload pro (high 7.5)
- [CVE-2006-2693](https://insights.sbomify.com/CVE-2006-2693/): Path traversal in nivisec:hacks list (high 7.1)
- [CVE-2006-2692](https://insights.sbomify.com/CVE-2006-2692/): Path traversal in amule:amule (medium 5.0)
- [CVE-2006-2691](https://insights.sbomify.com/CVE-2006-2691/): Information disclosure in amule:amule (medium 5.0)
- [CVE-2006-2690](https://insights.sbomify.com/CVE-2006-2690/): Information disclosure in eva-web:eva-web (high 7.8)
- [CVE-2006-2689](https://insights.sbomify.com/CVE-2006-2689/): Cross-site scripting in eva-web:eva-web (medium 6.8)
- [CVE-2006-2688](https://insights.sbomify.com/CVE-2006-2688/): SQL injection in achievo:achievo (medium 6.4)
- [CVE-2006-2687](https://insights.sbomify.com/CVE-2006-2687/): Cross-site scripting in agtc websolutions:php-agtc membership system (medium 4.9)
- [CVE-2006-2686](https://insights.sbomify.com/CVE-2006-2686/): Code injection in actionapps:actionapps (medium 6.4)
- [CVE-2006-2685](https://insights.sbomify.com/CVE-2006-2685/): Code injection in kevin johnson:basic analysis and security engine (medium 4.0)
- [CVE-2006-2684](https://insights.sbomify.com/CVE-2006-2684/): Cross-site scripting in hotwebscripts:cms mundo (medium 5.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/44/
