# Vulnerabilities published in 2006


- [CVE-2006-2683](https://insights.sbomify.com/CVE-2006-2683/): Code injection in open-medium:open-medium cms (medium 6.4)
- [CVE-2006-2682](https://insights.sbomify.com/CVE-2006-2682/): Code injection in back-end:back-end cms (medium 6.4)
- [CVE-2006-2681](https://insights.sbomify.com/CVE-2006-2681/): Code injection in socketmail:socketmail (medium 6.8)
- [CVE-2006-2680](https://insights.sbomify.com/CVE-2006-2680/): Cross-site scripting in php4script:az photo album script pro (medium 5.8)
- [CVE-2006-2679](https://insights.sbomify.com/CVE-2006-2679/): Privilege escalation in cisco:vpn client (high 7.2)
- [CVE-2006-2678](https://insights.sbomify.com/CVE-2006-2678/): Cross-site scripting in pre projects:pre news manager (medium 5.8)
- [CVE-2006-2677](https://insights.sbomify.com/CVE-2006-2677/): Information disclosure in sitescape:sitescape forum (medium 5.0)
- [CVE-2006-2676](https://insights.sbomify.com/CVE-2006-2676/): Information disclosure in sitescape:sitescape forum (medium 5.0)
- [CVE-2006-2675](https://insights.sbomify.com/CVE-2006-2675/): Code injection in ubbcentral:ubb.threads (medium 5.1)
- [CVE-2006-2674](https://insights.sbomify.com/CVE-2006-2674/): SQL injection in tamber forum:tamber forum (high 7.5)
- [CVE-2006-2673](https://insights.sbomify.com/CVE-2006-2673/): Cross-site scripting in e-board:elite-board (medium 6.8)
- [CVE-2006-2672](https://insights.sbomify.com/CVE-2006-2672/): Cross-site scripting in interquest internet services:realty pro one (medium 6.8)
- [CVE-2006-2671](https://insights.sbomify.com/CVE-2006-2671/): SQL injection in calendarscripts.com:chatpat (medium 5.0)
- [CVE-2006-2670](https://insights.sbomify.com/CVE-2006-2670/): Cross-site scripting in calendarscripts.com:chatpat (medium 5.8)
- [CVE-2006-2669](https://insights.sbomify.com/CVE-2006-2669/): Cross-site scripting in preprojects.com:pre shopping mall (medium 4.3)
- [CVE-2006-2668](https://insights.sbomify.com/CVE-2006-2668/): Code injection in docebolms:docebolms (high 7.5)
- [CVE-2006-2667](https://insights.sbomify.com/CVE-2006-2667/): Code injection in wordpress:wordpress (high 7.5)
- [CVE-2006-2666](https://insights.sbomify.com/CVE-2006-2666/): Code injection in v-webmail:v-webmail (high 7.5)
- [CVE-2006-2665](https://insights.sbomify.com/CVE-2006-2665/): Code injection in v-webmail:v-webmail (high 7.5)
- [CVE-2006-2664](https://insights.sbomify.com/CVE-2006-2664/): Cross-site scripting in ifdate.com:ifdate (medium 5.8)
- [CVE-2006-2663](https://insights.sbomify.com/CVE-2006-2663/): Cross-site scripting in ifusionservices:iflance (medium 4.3)
- [CVE-2006-2662](https://insights.sbomify.com/CVE-2006-2662/): Information disclosure in vmware:server (medium 4.6)
- [CVE-2006-2661](https://insights.sbomify.com/CVE-2006-2661/): Null dereference in canonical:ubuntu linux (medium 5.0)
- [CVE-2006-2660](https://insights.sbomify.com/CVE-2006-2660/): Security feature bypass in php:php (low 2.1)
- [CVE-2006-2659](https://insights.sbomify.com/CVE-2006-2659/): Denial of service in double precision incorporated:courier mta (high 7.8)
- [CVE-2006-2658](https://insights.sbomify.com/CVE-2006-2658/): Path traversal in mono:xsp (medium 5.0)
- [CVE-2006-2656](https://insights.sbomify.com/CVE-2006-2656/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2006-2655](https://insights.sbomify.com/CVE-2006-2655/): Security feature bypass in freebsd:freebsd (medium 6.4)
- [CVE-2006-2654](https://insights.sbomify.com/CVE-2006-2654/): Path traversal in freebsd:freebsd (medium 6.4)
- [CVE-2006-2653](https://insights.sbomify.com/CVE-2006-2653/): Cross-site scripting in d-link:dsa-3100 airspot gateway (low 2.6)
- [CVE-2006-2652](https://insights.sbomify.com/CVE-2006-2652/): Cross-site scripting in wikini:wikini (medium 6.8)
- [CVE-2006-2651](https://insights.sbomify.com/CVE-2006-2651/): Cross-site scripting in vacation rentals:vacation rental script (low 2.6)
- [CVE-2006-2650](https://insights.sbomify.com/CVE-2006-2650/): SQL injection in cosmicphp:cosmicshoppingcart (high 7.5)
- [CVE-2006-2649](https://insights.sbomify.com/CVE-2006-2649/): Cross-site scripting in cosmicphp:cosmicshoppingcart (medium 6.8)
- [CVE-2006-2648](https://insights.sbomify.com/CVE-2006-2648/): Cross-site scripting in aspbb:aspbb (low 2.6)
- [CVE-2006-2647](https://insights.sbomify.com/CVE-2006-2647/): Privilege escalation in ibm:aix (high 7.2)
- [CVE-2006-2646](https://insights.sbomify.com/CVE-2006-2646/): Memory corruption in alt-n:mdaemon (high 7.5)
- [CVE-2006-2645](https://insights.sbomify.com/CVE-2006-2645/): Code injection in plume-cms:plume cms (high 7.5)
- [CVE-2006-2644](https://insights.sbomify.com/CVE-2006-2644/): Command injection in awstats:awstats (medium 4.0)
- [CVE-2006-2643](https://insights.sbomify.com/CVE-2006-2643/): Cross-site scripting in circle r:monster top list (medium 4.3)
- [CVE-2006-2642](https://insights.sbomify.com/CVE-2006-2642/): Cross-site scripting in php-residence:php-residence (medium 4.3)
- [CVE-2006-2641](https://insights.sbomify.com/CVE-2006-2641/): Cross-site scripting in john frank:asset manager (medium 5.8)
- [CVE-2006-2640](https://insights.sbomify.com/CVE-2006-2640/): Cross-site scripting in omegasoft:interneserviceslosungen (medium 5.8)
- [CVE-2006-2639](https://insights.sbomify.com/CVE-2006-2639/): Cross-site scripting in phpsimplechoose:phpsimplechoose (medium 4.3)
- [CVE-2006-2638](https://insights.sbomify.com/CVE-2006-2638/): SQL injection in qjstudios:qjforum (medium 6.4)
- [CVE-2006-2637](https://insights.sbomify.com/CVE-2006-2637/): Cross-site scripting in tuttophp:morris guestbook (medium 4.3)
- [CVE-2006-2636](https://insights.sbomify.com/CVE-2006-2636/): Auth bypass in katy whitton:newscmslite (high 7.5)
- [CVE-2006-2635](https://insights.sbomify.com/CVE-2006-2635/): Cross-site scripting in tiki:tikiwiki cms\/groupware (medium 4.3)
- [CVE-2006-2634](https://insights.sbomify.com/CVE-2006-2634/): Cross-site scripting in neocrome:seditio (medium 4.3)
- [CVE-2006-2633](https://insights.sbomify.com/CVE-2006-2633/): Path traversal in andrew godwin:bytehoard (medium 4.0)
- [CVE-2006-2632](https://insights.sbomify.com/CVE-2006-2632/): Cross-site scripting in andrew godwin:bytehoard (low 3.5)
- [CVE-2006-2631](https://insights.sbomify.com/CVE-2006-2631/): Missing authorization in phpfox:phpfox (medium 4.0)
- [CVE-2006-2630](https://insights.sbomify.com/CVE-2006-2630/): Memory corruption in symantec:client security (critical 10.0)
- [CVE-2006-2629](https://insights.sbomify.com/CVE-2006-2629/): Race condition in linux:linux kernel (medium 4.0)
- [CVE-2006-2618](https://insights.sbomify.com/CVE-2006-2618/): Cross-site scripting in alstrasoft:webhost directory (medium 4.3)
- [CVE-2006-2617](https://insights.sbomify.com/CVE-2006-2617/): Information disclosure in alstrasoft:webhost directory (medium 5.0)
- [CVE-2006-2616](https://insights.sbomify.com/CVE-2006-2616/): SQL injection in alstrasoft:webhost directory (high 7.5)
- [CVE-2006-2615](https://insights.sbomify.com/CVE-2006-2615/): Command injection in russcom network:russcom.ping (high 7.5)
- [CVE-2006-2614](https://insights.sbomify.com/CVE-2006-2614/): Information disclosure in sun:n1 system manager (medium 4.6)
- [CVE-2006-2613](https://insights.sbomify.com/CVE-2006-2613/): Information disclosure in mozilla:firefox (medium 4.3)
- [CVE-2006-2612](https://insights.sbomify.com/CVE-2006-2612/): Security feature bypass in novell:client (low 2.1)
- [CVE-2006-2611](https://insights.sbomify.com/CVE-2006-2611/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2006-2610](https://insights.sbomify.com/CVE-2006-2610/): Cross-site scripting in spiffyjr:phpraid (low 2.6)
- [CVE-2006-2609](https://insights.sbomify.com/CVE-2006-2609/): Code injection in artmedic webdesign:artmedic newsletter (medium 5.1)
- [CVE-2006-2608](https://insights.sbomify.com/CVE-2006-2608/): Code injection in artmedic webdesign:artmedic newsletter (medium 5.1)
- [CVE-2006-2607](https://insights.sbomify.com/CVE-2006-2607/): Privilege escalation in paul vixie:vixie cron (high 7.2)
- [CVE-2006-2606](https://insights.sbomify.com/CVE-2006-2606/): Cross-site scripting in chatty:chatty (medium 4.3)
- [CVE-2006-2605](https://insights.sbomify.com/CVE-2006-2605/): Cross-site scripting in dschat:dschat (medium 4.3)
- [CVE-2006-2592](https://insights.sbomify.com/CVE-2006-2592/): Code injection in dschat:dschat (high 7.5)
- [CVE-2006-2591](https://insights.sbomify.com/CVE-2006-2591/): Other in e107:e107 (medium 5.0)
- [CVE-2006-2590](https://insights.sbomify.com/CVE-2006-2590/): SQL injection in e107:e107 (medium 6.4)
- [CVE-2006-2589](https://insights.sbomify.com/CVE-2006-2589/): SQL injection in mybulletinboard:mybulletinboard (medium 6.4)
- [CVE-2006-2588](https://insights.sbomify.com/CVE-2006-2588/): File upload in russcom network:phpimages (medium 5.0)
- [CVE-2006-2587](https://insights.sbomify.com/CVE-2006-2587/): Memory corruption in even balance:punkbuster (medium 5.0)
- [CVE-2006-2586](https://insights.sbomify.com/CVE-2006-2586/): Cross-site scripting in iplogger:iplogger (medium 5.8)
- [CVE-2006-2585](https://insights.sbomify.com/CVE-2006-2585/): SQL injection in greg donald:destiney links script (medium 6.4)
- [CVE-2006-2584](https://insights.sbomify.com/CVE-2006-2584/): Cross-site scripting in skyebox:skyebox (medium 4.3)
- [CVE-2006-2583](https://insights.sbomify.com/CVE-2006-2583/): Code injection in nucleus group:nucleus cms (medium 5.1)
- [CVE-2006-2582](https://insights.sbomify.com/CVE-2006-2582/): Remote code execution in rwiki (high 7.5)
- [CVE-2006-2581](https://insights.sbomify.com/CVE-2006-2581/): Cross-site scripting in rwiki:rwiki (medium 4.3)
- [CVE-2006-2580](https://insights.sbomify.com/CVE-2006-2580/): Other in hp:openview network node manager (high 7.5)
- [CVE-2006-2579](https://insights.sbomify.com/CVE-2006-2579/): Other in hp:openview storage data protector (high 7.5)
- [CVE-2006-2578](https://insights.sbomify.com/CVE-2006-2578/): Code injection in esyndicat:esyndicat directory (medium 5.1)
- [CVE-2006-2577](https://insights.sbomify.com/CVE-2006-2577/): Code injection in docebo:docebo (medium 5.1)
- [CVE-2006-2576](https://insights.sbomify.com/CVE-2006-2576/): Code injection in docebo:docebo (medium 5.1)
- [CVE-2006-2575](https://insights.sbomify.com/CVE-2006-2575/): Denial of service in pyrosoft inc:netpanzer (medium 5.0)
- [CVE-2006-2574](https://insights.sbomify.com/CVE-2006-2574/): Privilege escalation in hp:hp-ux (high 7.2)
- [CVE-2006-2573](https://insights.sbomify.com/CVE-2006-2573/): SQL injection in dian gemilang:dgbook (medium 5.1)
- [CVE-2006-2572](https://insights.sbomify.com/CVE-2006-2572/): Cross-site scripting in dian gemilang:dgbook (low 2.6)
- [CVE-2006-2571](https://insights.sbomify.com/CVE-2006-2571/): Alkacon OpenCms XSS via query parameter in a search action (low 2.6)
- [CVE-2006-2570](https://insights.sbomify.com/CVE-2006-2570/): Code injection in calogic:calogic calendars (high 7.5)
- [CVE-2006-2569](https://insights.sbomify.com/CVE-2006-2569/): SQL injection in 4r linklist:4r linklist (high 7.5)
- [CVE-2006-2568](https://insights.sbomify.com/CVE-2006-2568/): Code injection in ubbcentral:ubb.threads (medium 5.1)
- [CVE-2006-2567](https://insights.sbomify.com/CVE-2006-2567/): Cross-site scripting in alstrasoft:article manager pro (medium 4.3)
- [CVE-2006-2566](https://insights.sbomify.com/CVE-2006-2566/): Information disclosure in alstrasoft:article manager pro (medium 5.0)
- [CVE-2006-2565](https://insights.sbomify.com/CVE-2006-2565/): SQL injection in alstrasoft:article manager pro (high 7.5)
- [CVE-2006-2564](https://insights.sbomify.com/CVE-2006-2564/): Cross-site scripting in alstrasoft:e-friends (medium 4.3)
- [CVE-2006-2563](https://insights.sbomify.com/CVE-2006-2563/): Security feature bypass in php:php (low 2.1)
- [CVE-2006-2562](https://insights.sbomify.com/CVE-2006-2562/): Missing authorization in zyxel:p-335wt router (high 7.5)
- [CVE-2006-2561](https://insights.sbomify.com/CVE-2006-2561/): Auth bypass in edimax:br 6104k (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/45/