# Vulnerabilities published in 2006


- [CVE-2006-2560](https://insights.sbomify.com/CVE-2006-2560/): Missing authorization in sitecom:wl-153 (high 7.5)
- [CVE-2006-2559](https://insights.sbomify.com/CVE-2006-2559/): Missing authorization in linksys:wrt54g (high 7.5)
- [CVE-2006-2558](https://insights.sbomify.com/CVE-2006-2558/): Cross-site scripting in iplogger:iplogger (medium 5.8)
- [CVE-2006-2557](https://insights.sbomify.com/CVE-2006-2557/): Code injection in florian amrhein:newsportal (medium 6.4)
- [CVE-2006-2556](https://insights.sbomify.com/CVE-2006-2556/): Cross-site scripting in florian amrhein:newsportal (medium 5.8)
- [CVE-2006-2555](https://insights.sbomify.com/CVE-2006-2555/): Null dereference in genecys:genecys (medium 5.0)
- [CVE-2006-2554](https://insights.sbomify.com/CVE-2006-2554/): Memory corruption in genecys:genecys (medium 6.4)
- [CVE-2006-2553](https://insights.sbomify.com/CVE-2006-2553/): Cross-site scripting in jemscripts:downloadcontrol (medium 4.3)
- [CVE-2006-2552](https://insights.sbomify.com/CVE-2006-2552/): Information disclosure in jemscripts:downloadcontrol (medium 5.0)
- [CVE-2006-2551](https://insights.sbomify.com/CVE-2006-2551/): Denial of service in hp:hp-ux (low 2.1)
- [CVE-2006-2550](https://insights.sbomify.com/CVE-2006-2550/): Command injection in perlpodder:perlpodder (medium 5.1)
- [CVE-2006-2549](https://insights.sbomify.com/CVE-2006-2549/): Memory corruption in pdf tools ag:pdf form filling and flattening tool (high 7.5)
- [CVE-2006-2548](https://insights.sbomify.com/CVE-2006-2548/): Command injection in perlpodder:perlpodder (high 7.5)
- [CVE-2006-2547](https://insights.sbomify.com/CVE-2006-2547/): Command injection in sap:sapdba (critical 10.0)
- [CVE-2006-2546](https://insights.sbomify.com/CVE-2006-2546/): Information disclosure in bea:weblogic server (medium 5.0)
- [CVE-2006-2545](https://insights.sbomify.com/CVE-2006-2545/): Cross-site scripting in xtreme scripts:xtreme topsites (low 2.6)
- [CVE-2006-2544](https://insights.sbomify.com/CVE-2006-2544/): SQL injection in xtreme scripts:xtreme topsites (medium 5.1)
- [CVE-2006-2543](https://insights.sbomify.com/CVE-2006-2543/): SQL injection in xtreme scripts:xtreme topsites (medium 5.1)
- [CVE-2006-2542](https://insights.sbomify.com/CVE-2006-2542/): Misconfiguration in ti kan:xmcd (low 2.1)
- [CVE-2006-2541](https://insights.sbomify.com/CVE-2006-2541/): SQL injection in john andersson:zixforum (high 7.5)
- [CVE-2006-2540](https://insights.sbomify.com/CVE-2006-2540/): Information disclosure in dieselscripts:diesel job site (medium 5.0)
- [CVE-2006-2539](https://insights.sbomify.com/CVE-2006-2539/): Information disclosure in sybase:easerver (low 3.5)
- [CVE-2006-2538](https://insights.sbomify.com/CVE-2006-2538/): Null dereference in ie tab:ie tab (low 2.6)
- [CVE-2006-2537](https://insights.sbomify.com/CVE-2006-2537/): Memory corruption in horizontal shooter bor:horizontal shooter bor (high 7.5)
- [CVE-2006-2536](https://insights.sbomify.com/CVE-2006-2536/): Cross-site scripting in greg donald:destiney links script (medium 5.8)
- [CVE-2006-2535](https://insights.sbomify.com/CVE-2006-2535/): Information disclosure in greg donald:destiney links script (medium 5.0)
- [CVE-2006-2534](https://insights.sbomify.com/CVE-2006-2534/): Information disclosure in greg donald:destiney links script (medium 5.0)
- [CVE-2006-2533](https://insights.sbomify.com/CVE-2006-2533/): Cross-site scripting in greg donald:destiney rated images script (medium 5.8)
- [CVE-2006-2532](https://insights.sbomify.com/CVE-2006-2532/): Information disclosure in greg donald:destiney rated images script (medium 6.4)
- [CVE-2006-2531](https://insights.sbomify.com/CVE-2006-2531/): Auth bypass in ipswitch:whatsup (high 7.5)
- [CVE-2006-2530](https://insights.sbomify.com/CVE-2006-2530/): File upload in snitz communications:avatar mod (medium 5.0)
- [CVE-2006-2529](https://insights.sbomify.com/CVE-2006-2529/): File upload in fckeditor:fckeditor (medium 5.0)
- [CVE-2006-2528](https://insights.sbomify.com/CVE-2006-2528/): Code injection in smartisoft:phpbazar (medium 6.4)
- [CVE-2006-2527](https://insights.sbomify.com/CVE-2006-2527/): Auth bypass in smartisoft:phpbazar (high 7.5)
- [CVE-2006-2526](https://insights.sbomify.com/CVE-2006-2526/): Code injection in power place:php easy galerie (medium 6.4)
- [CVE-2006-2525](https://insights.sbomify.com/CVE-2006-2525/): SQL injection in usebb:usebb (medium 6.4)
- [CVE-2006-2524](https://insights.sbomify.com/CVE-2006-2524/): Cross-site scripting in usebb:usebb (medium 6.8)
- [CVE-2006-2523](https://insights.sbomify.com/CVE-2006-2523/): Code injection in smartisoft:phplistpro (high 7.5)
- [CVE-2006-2522](https://insights.sbomify.com/CVE-2006-2522/): Information disclosure in dayfox designs:dayfox blog (high 7.5)
- [CVE-2006-2521](https://insights.sbomify.com/CVE-2006-2521/): Code injection in accomplishtechnology:phpmydirectory (high 7.5)
- [CVE-2006-2520](https://insights.sbomify.com/CVE-2006-2520/): Path traversal in bitberry software:bitzipper (medium 5.0)
- [CVE-2006-2519](https://insights.sbomify.com/CVE-2006-2519/): Path traversal in phpwcms:phpwcms (low 2.6)
- [CVE-2006-2518](https://insights.sbomify.com/CVE-2006-2518/): Cross-site scripting in phpwcms:phpwcms (low 2.6)
- [CVE-2006-2517](https://insights.sbomify.com/CVE-2006-2517/): SQL injection in fujitsu:myweb portal office (high 7.5)
- [CVE-2006-2516](https://insights.sbomify.com/CVE-2006-2516/): Code injection in xoops:xoops (medium 5.1)
- [CVE-2006-2515](https://insights.sbomify.com/CVE-2006-2515/): Cross-site scripting in hiox india:guest book (medium 6.8)
- [CVE-2006-2514](https://insights.sbomify.com/CVE-2006-2514/): File upload in coppermine:coppermine photo gallery (high 7.5)
- [CVE-2006-2513](https://insights.sbomify.com/CVE-2006-2513/): Privilege escalation in sun:java system directory server (high 7.5)
- [CVE-2006-2512](https://insights.sbomify.com/CVE-2006-2512/): SQL injection in hitachi:eur print service (medium 6.5)
- [CVE-2006-2511](https://insights.sbomify.com/CVE-2006-2511/): File upload in frontrange:iheat (medium 6.5)
- [CVE-2006-2510](https://insights.sbomify.com/CVE-2006-2510/): Cross-site scripting in yourfreeworld:short url and url tracker script (medium 6.8)
- [CVE-2006-2509](https://insights.sbomify.com/CVE-2006-2509/): SQL injection in yourfreeworld:short url and url tracker script (high 7.5)
- [CVE-2006-2508](https://insights.sbomify.com/CVE-2006-2508/): SQL injection in yourfreeworld:stylish text ads script (medium 6.4)
- [CVE-2006-2507](https://insights.sbomify.com/CVE-2006-2507/): Code injection in teake nutma:foing (high 7.5)
- [CVE-2006-2506](https://insights.sbomify.com/CVE-2006-2506/): Cross-site scripting in sphider:sphider (medium 6.8)
- [CVE-2006-2505](https://insights.sbomify.com/CVE-2006-2505/): SQL injection in oracle:database server (low 3.6)
- [CVE-2006-2504](https://insights.sbomify.com/CVE-2006-2504/): SQL injection in azboard:azboard (high 7.5)
- [CVE-2006-2503](https://insights.sbomify.com/CVE-2006-2503/): SQL injection in deluxebb:deluxebb (high 7.5)
- [CVE-2006-2502](https://insights.sbomify.com/CVE-2006-2502/): Memory corruption in cyrus:imapd (medium 5.1)
- [CVE-2006-2501](https://insights.sbomify.com/CVE-2006-2501/): Cross-site scripting in sun:java system application server (medium 6.8)
- [CVE-2006-2500](https://insights.sbomify.com/CVE-2006-2500/): Cross-site scripting in xfairguy:codeavalanche news (medium 6.8)
- [CVE-2006-2499](https://insights.sbomify.com/CVE-2006-2499/): SQL injection in xfairguy:codeavalanche news (high 7.5)
- [CVE-2006-2498](https://insights.sbomify.com/CVE-2006-2498/): Code injection in invision power services:invision power board (medium 6.4)
- [CVE-2006-2497](https://insights.sbomify.com/CVE-2006-2497/): Cross-site scripting in aspbb:aspbb (medium 5.8)
- [CVE-2006-2496](https://insights.sbomify.com/CVE-2006-2496/): Memory corruption in novell:edirectory (critical 10.0)
- [CVE-2006-2495](https://insights.sbomify.com/CVE-2006-2495/): Cross-site request forgery in s9y:serendipity (high 7.5)
- [CVE-2006-2494](https://insights.sbomify.com/CVE-2006-2494/): Memory corruption in lacaveprods:intellitamper (medium 5.1)
- [CVE-2006-2492](https://insights.sbomify.com/CVE-2006-2492/): Microsoft Word Malformed Object Pointer (high 8.8, exploited in the wild)
- [CVE-2006-2491](https://insights.sbomify.com/CVE-2006-2491/): Cross-site scripting in boastmachine:boastmachine (medium 6.8)
- [CVE-2006-2490](https://insights.sbomify.com/CVE-2006-2490/): Cross-site scripting in mobotix:mobotix ip network camera (medium 4.3)
- [CVE-2006-2489](https://insights.sbomify.com/CVE-2006-2489/): Integer overflow in nagios:nagios (high 7.5)
- [CVE-2006-2488](https://insights.sbomify.com/CVE-2006-2488/): Cross-site scripting in spymac:spymac web os (medium 4.3)
- [CVE-2006-2487](https://insights.sbomify.com/CVE-2006-2487/): Code injection in scoznet:scoznews (high 7.5)
- [CVE-2006-2486](https://insights.sbomify.com/CVE-2006-2486/): SQL injection in yapbb:yapbb (medium 6.4)
- [CVE-2006-2485](https://insights.sbomify.com/CVE-2006-2485/): Code injection in quezza:quezza bb (high 7.5)
- [CVE-2006-2484](https://insights.sbomify.com/CVE-2006-2484/): Cross-site scripting in icewarp:web mail (medium 4.3)
- [CVE-2006-2483](https://insights.sbomify.com/CVE-2006-2483/): Code injection in lighthouse development:squirrelcart (medium 6.4)
- [CVE-2006-2482](https://insights.sbomify.com/CVE-2006-2482/): Memory corruption in microchip data systems:ziptv for c\+\+ builder (medium 6.8)
- [CVE-2006-2481](https://insights.sbomify.com/CVE-2006-2481/): Weak cryptography in vmware:esx (medium 5.0)
- [CVE-2006-2480](https://insights.sbomify.com/CVE-2006-2480/): Memory corruption in dia:dia (medium 5.1)
- [CVE-2006-2479](https://insights.sbomify.com/CVE-2006-2479/): Supply chain in bitrix:bitrix site manager (medium 5.0)
- [CVE-2006-2478](https://insights.sbomify.com/CVE-2006-2478/): Open redirect in bitrix:bitrix site manager (medium 5.0)
- [CVE-2006-2477](https://insights.sbomify.com/CVE-2006-2477/): Cross-site scripting in bitrix:bitrix site manager (medium 4.9)
- [CVE-2006-2476](https://insights.sbomify.com/CVE-2006-2476/): Information disclosure in bitrix:bitrix site manager (medium 5.0)
- [CVE-2006-2475](https://insights.sbomify.com/CVE-2006-2475/): Path traversal in cosmoshop:cosmoshop (high 7.8)
- [CVE-2006-2474](https://insights.sbomify.com/CVE-2006-2474/): SQL injection in cosmoshop:cosmoshop (high 7.5)
- [CVE-2006-2473](https://insights.sbomify.com/CVE-2006-2473/): Cross-site scripting in openwiki:openwiki (medium 4.3)
- [CVE-2006-2472](https://insights.sbomify.com/CVE-2006-2472/): Information disclosure in bea:weblogic server (medium 4.9)
- [CVE-2006-2471](https://insights.sbomify.com/CVE-2006-2471/): Information disclosure in bea:weblogic server (medium 5.0)
- [CVE-2006-2470](https://insights.sbomify.com/CVE-2006-2470/): Security feature bypass in bea:weblogic server (high 7.5)
- [CVE-2006-2469](https://insights.sbomify.com/CVE-2006-2469/): Information disclosure in bea:weblogic server (high 7.5)
- [CVE-2006-2468](https://insights.sbomify.com/CVE-2006-2468/): Information disclosure in bea:weblogic server (medium 4.0)
- [CVE-2006-2467](https://insights.sbomify.com/CVE-2006-2467/): Information disclosure in bea:weblogic server (medium 4.0)
- [CVE-2006-2466](https://insights.sbomify.com/CVE-2006-2466/): Information disclosure in bea:weblogic server (low 2.6)
- [CVE-2006-2465](https://insights.sbomify.com/CVE-2006-2465/): Memory corruption in mp3info:mp3info (medium 5.1)
- [CVE-2006-2464](https://insights.sbomify.com/CVE-2006-2464/): Information disclosure in bea:weblogic server (medium 4.6)
- [CVE-2006-2463](https://insights.sbomify.com/CVE-2006-2463/): Information disclosure in out of the trees web design:selectapix (medium 5.0)
- [CVE-2006-2462](https://insights.sbomify.com/CVE-2006-2462/): Information disclosure in bea:weblogic server (medium 5.0)
- [CVE-2006-2461](https://insights.sbomify.com/CVE-2006-2461/): Security feature bypass in bea:weblogic server (medium 5.0)
- [CVE-2006-2460](https://insights.sbomify.com/CVE-2006-2460/): Code injection in sugarcrm:sugarcrm (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/46/