# Vulnerabilities published in 2006


- [CVE-2006-2147](https://insights.sbomify.com/CVE-2006-2147/): Security feature bypass in resmgr:resmgrd (low 3.6)
- [CVE-2006-2146](https://insights.sbomify.com/CVE-2006-2146/): Cross-site scripting in harold bakker:hb-ns (medium 5.8)
- [CVE-2006-2145](https://insights.sbomify.com/CVE-2006-2145/): SQL injection in harold bakker:hb-ns (medium 6.4)
- [CVE-2006-2144](https://insights.sbomify.com/CVE-2006-2144/): Code injection in dmcounter:dmcounter (medium 6.4)
- [CVE-2006-2143](https://insights.sbomify.com/CVE-2006-2143/): Cross-site scripting in jcink:textfilebb (medium 4.3)
- [CVE-2006-2142](https://insights.sbomify.com/CVE-2006-2142/): Code injection in limbo cms:limbo cms (medium 6.4)
- [CVE-2006-2141](https://insights.sbomify.com/CVE-2006-2141/): Cross-site scripting in collaborative portal server project:collaborative portal server (medium 4.3)
- [CVE-2006-2140](https://insights.sbomify.com/CVE-2006-2140/): Cross-site scripting in orbitscripts:orbithyip (medium 5.8)
- [CVE-2006-2139](https://insights.sbomify.com/CVE-2006-2139/): SQL injection in wilsonncareabusinesses:php newsfeed (medium 6.4)
- [CVE-2006-2138](https://insights.sbomify.com/CVE-2006-2138/): Cross-site scripting in neomail:neomail (medium 4.3)
- [CVE-2006-2137](https://insights.sbomify.com/CVE-2006-2137/): Code injection in openphpnuke:openphpnuke (high 7.5)
- [CVE-2006-2136](https://insights.sbomify.com/CVE-2006-2136/): SQL injection in aznews:aznews (high 7.5)
- [CVE-2006-2135](https://insights.sbomify.com/CVE-2006-2135/): SQL injection in ruperts news:ruperts news (high 7.5)
- [CVE-2006-2134](https://insights.sbomify.com/CVE-2006-2134/): Code injection in phpbb group:phpbb (medium 5.1)
- [CVE-2006-2133](https://insights.sbomify.com/CVE-2006-2133/): SQL injection in boonex:barracuda (high 7.5)
- [CVE-2006-2132](https://insights.sbomify.com/CVE-2006-2132/): SQL injection in duware:duclassified (medium 6.4)
- [CVE-2006-2131](https://insights.sbomify.com/CVE-2006-2131/): Security feature bypass in advanced poll:advanced poll (medium 5.0)
- [CVE-2006-2130](https://insights.sbomify.com/CVE-2006-2130/): SQL injection in advanced poll:advanced poll (medium 5.1)
- [CVE-2006-2129](https://insights.sbomify.com/CVE-2006-2129/): Code injection in deltascripts:pro publish (medium 5.5)
- [CVE-2006-2128](https://insights.sbomify.com/CVE-2006-2128/): SQL injection in deltascripts:pro publish (high 7.5)
- [CVE-2006-2127](https://insights.sbomify.com/CVE-2006-2127/): SQL injection in blog mod:blog mod (medium 6.4)
- [CVE-2006-2126](https://insights.sbomify.com/CVE-2006-2126/): SQL injection in avalon ltd:maxtrade (medium 6.4)
- [CVE-2006-2124](https://insights.sbomify.com/CVE-2006-2124/): Cross-site scripting in turnkey solutions:sunshop shopping cart (medium 5.8)
- [CVE-2006-2123](https://insights.sbomify.com/CVE-2006-2123/): SQL injection in network administration visualized:network administration visualized (medium 6.4)
- [CVE-2006-2122](https://insights.sbomify.com/CVE-2006-2122/): Code injection in coolmenus:coolmenus (medium 6.8)
- [CVE-2006-2121](https://insights.sbomify.com/CVE-2006-2121/): Code injection in i-rater:i-rater platinum (medium 5.0)
- [CVE-2006-2120](https://insights.sbomify.com/CVE-2006-2120/): Memory corruption in libtiff:libtiff (low 2.1)
- [CVE-2006-2119](https://insights.sbomify.com/CVE-2006-2119/): Code injection in artmedic webdesign:artmedic event (medium 5.0)
- [CVE-2006-2118](https://insights.sbomify.com/CVE-2006-2118/): Auth bypass in jmk web scripts:jmk picture gallery (high 7.5)
- [CVE-2006-2117](https://insights.sbomify.com/CVE-2006-2117/): Cross-site scripting in extrosoft:thyme (medium 4.3)
- [CVE-2006-2116](https://insights.sbomify.com/CVE-2006-2116/): Missing authorization in planet concept:planetgallery (high 7.5)
- [CVE-2006-2115](https://insights.sbomify.com/CVE-2006-2115/): Memory corruption in sws:sws simple web server (high 7.5)
- [CVE-2006-2114](https://insights.sbomify.com/CVE-2006-2114/): Memory corruption in sws:sws simple web server (high 7.5)
- [CVE-2006-2113](https://insights.sbomify.com/CVE-2006-2113/): Auth bypass in dell:3000cn (medium 6.4)
- [CVE-2006-2112](https://insights.sbomify.com/CVE-2006-2112/): Server-side request forgery in dell:3000cn (high 7.5)
- [CVE-2006-2111](https://insights.sbomify.com/CVE-2006-2111/): Security feature bypass in microsoft:outlook express (medium 4.3)
- [CVE-2006-2110](https://insights.sbomify.com/CVE-2006-2110/): Privilege escalation in virtual private server:vserver (low 2.1)
- [CVE-2006-2109](https://insights.sbomify.com/CVE-2006-2109/): Cross-site scripting in jsboard:jsboard (medium 6.8)
- [CVE-2006-2108](https://insights.sbomify.com/CVE-2006-2108/): Memory corruption in oce north america:3121 printer (high 7.8)
- [CVE-2006-2107](https://insights.sbomify.com/CVE-2006-2107/): Memory corruption in bl4:smtp server (high 7.5)
- [CVE-2006-2106](https://insights.sbomify.com/CVE-2006-2106/): Cross-site scripting in edgewall software:trac (medium 4.3)
- [CVE-2006-2105](https://insights.sbomify.com/CVE-2006-2105/): Path traversal in jupiter cms:jupiter cms (medium 5.0)
- [CVE-2006-2104](https://insights.sbomify.com/CVE-2006-2104/): Cross-site scripting in kmail:kmail (medium 6.8)
- [CVE-2006-2103](https://insights.sbomify.com/CVE-2006-2103/): SQL injection in mybulletinboard:mybulletinboard (low 2.1)
- [CVE-2006-2102](https://insights.sbomify.com/CVE-2006-2102/): Path traversal in poweriso:poweriso (high 7.8)
- [CVE-2006-2101](https://insights.sbomify.com/CVE-2006-2101/): Path traversal in winiso computing:winiso (medium 5.0)
- [CVE-2006-2100](https://insights.sbomify.com/CVE-2006-2100/): Path traversal in magic iso maker:magic iso maker (high 7.8)
- [CVE-2006-2099](https://insights.sbomify.com/CVE-2006-2099/): Path traversal in ezb systems:ultraiso (medium 5.0)
- [CVE-2006-2098](https://insights.sbomify.com/CVE-2006-2098/): Code injection in php thumbnail autoindex:php thumbnail autoindex (high 7.5)
- [CVE-2006-2097](https://insights.sbomify.com/CVE-2006-2097/): SQL injection in invision power services:invision power board (high 7.5)
- [CVE-2006-2096](https://insights.sbomify.com/CVE-2006-2096/): Information disclosure in neocrome:land down under (medium 5.0)
- [CVE-2006-2095](https://insights.sbomify.com/CVE-2006-2095/): Denial of service in phex:phex (medium 5.0)
- [CVE-2006-2094](https://insights.sbomify.com/CVE-2006-2094/): Race condition in microsoft:ie (medium 5.1)
- [CVE-2006-2093](https://insights.sbomify.com/CVE-2006-2093/): Denial of service in nessus:nessus (low 2.6)
- [CVE-2006-2092](https://insights.sbomify.com/CVE-2006-2092/): Denial of service in hp:storageworks secure path windows (medium 5.0)
- [CVE-2006-2091](https://insights.sbomify.com/CVE-2006-2091/): Information disclosure in vwar:virtual war (medium 5.0)
- [CVE-2006-2090](https://insights.sbomify.com/CVE-2006-2090/): SQL injection in mysmartbb:mysmartbb (high 7.5)
- [CVE-2006-2089](https://insights.sbomify.com/CVE-2006-2089/): Cross-site scripting in mysmartbb:mysmartbb (medium 4.3)
- [CVE-2006-2088](https://insights.sbomify.com/CVE-2006-2088/): Cross-site scripting in devsyn:open bulletin board (medium 4.3)
- [CVE-2006-2087](https://insights.sbomify.com/CVE-2006-2087/): Denial of service in hitachi:groupmax integrated desktop (medium 5.0)
- [CVE-2006-2086](https://insights.sbomify.com/CVE-2006-2086/): Memory corruption in juniper:junipersetup control (high 7.5)
- [CVE-2006-2085](https://insights.sbomify.com/CVE-2006-2085/): Memory corruption in speedproject:speedcommander (medium 5.1)
- [CVE-2006-2084](https://insights.sbomify.com/CVE-2006-2084/): Cross-site scripting in farsinews:farsinews (medium 4.3)
- [CVE-2006-2083](https://insights.sbomify.com/CVE-2006-2083/): Integer overflow in andrew tridgell:rsync (high 7.5)
- [CVE-2006-2082](https://insights.sbomify.com/CVE-2006-2082/): Path traversal in id software:quake 3 engine (high 7.5)
- [CVE-2006-2081](https://insights.sbomify.com/CVE-2006-2081/): Privilege escalation in oracle:database server (medium 4.6)
- [CVE-2006-2080](https://insights.sbomify.com/CVE-2006-2080/): SQL injection in verosky media:instant photo gallery (medium 6.8)
- [CVE-2006-2079](https://insights.sbomify.com/CVE-2006-2079/): Cross-site scripting in verosky media:instant photo gallery (medium 4.3)
- [CVE-2006-2078](https://insights.sbomify.com/CVE-2006-2078/): Denial of service in furukawa electric:fitelnet (high 7.8)
- [CVE-2006-2077](https://insights.sbomify.com/CVE-2006-2077/): Memory corruption in pdnsd:pdnsd (critical 10.0)
- [CVE-2006-2076](https://insights.sbomify.com/CVE-2006-2076/): Denial of service in pdnsd:pdnsd (medium 5.0)
- [CVE-2006-2075](https://insights.sbomify.com/CVE-2006-2075/): Denial of service in don moore:mydns (medium 5.0)
- [CVE-2006-2074](https://insights.sbomify.com/CVE-2006-2074/): Other in juniper:junose (critical 10.0)
- [CVE-2006-2073](https://insights.sbomify.com/CVE-2006-2073/): Denial of service in isc:bind (medium 5.0)
- [CVE-2006-2072](https://insights.sbomify.com/CVE-2006-2072/): Memory corruption in delegate:delegate (medium 5.0)
- [CVE-2006-2071](https://insights.sbomify.com/CVE-2006-2071/): Security feature bypass in linux:linux kernel (low 2.1)
- [CVE-2006-2070](https://insights.sbomify.com/CVE-2006-2070/): Cross-site scripting in mybb:devbb (medium 4.3)
- [CVE-2006-2069](https://insights.sbomify.com/CVE-2006-2069/): Denial of service in powerdns:powerdns (medium 5.0)
- [CVE-2006-2068](https://insights.sbomify.com/CVE-2006-2068/): Denial of service in hitachi:jp1-cm2-network node manager (medium 5.0)
- [CVE-2006-2067](https://insights.sbomify.com/CVE-2006-2067/): SQL injection in mkportal:mkportal (high 7.5)
- [CVE-2006-2066](https://insights.sbomify.com/CVE-2006-2066/): Cross-site scripting in mkportal:mkportal (medium 4.3)
- [CVE-2006-2065](https://insights.sbomify.com/CVE-2006-2065/): SQL injection in phpsurveyor:phpsurveyor (high 7.5)
- [CVE-2006-2064](https://insights.sbomify.com/CVE-2006-2064/): Race condition in sun:solaris (medium 4.6)
- [CVE-2006-2063](https://insights.sbomify.com/CVE-2006-2063/): Cross-site scripting in leadhound network:leadhound full (medium 6.8)
- [CVE-2006-2062](https://insights.sbomify.com/CVE-2006-2062/): SQL injection in leadhound network:leadhound full (medium 6.4)
- [CVE-2006-2061](https://insights.sbomify.com/CVE-2006-2061/): SQL injection in invision power services:invision board (medium 5.0)
- [CVE-2006-2060](https://insights.sbomify.com/CVE-2006-2060/): Path traversal in invision power services:invision power board (medium 6.4)
- [CVE-2006-2059](https://insights.sbomify.com/CVE-2006-2059/): Code injection in invision power services:invision power board (medium 5.0)
- [CVE-2006-2058](https://insights.sbomify.com/CVE-2006-2058/): Command injection in avantbrowser:avant browser (medium 5.0)
- [CVE-2006-2057](https://insights.sbomify.com/CVE-2006-2057/): Command injection in mozilla:firefox (medium 5.0)
- [CVE-2006-2056](https://insights.sbomify.com/CVE-2006-2056/): Command injection in microsoft:internet explorer (medium 5.0)
- [CVE-2006-2055](https://insights.sbomify.com/CVE-2006-2055/): Command injection in microsoft:outlook (medium 5.0)
- [CVE-2006-2054](https://insights.sbomify.com/CVE-2006-2054/): Denial of service in 3com:3c16486 (medium 5.0)
- [CVE-2006-2053](https://insights.sbomify.com/CVE-2006-2053/): SQL injection in quickestore:quickestore (medium 6.4)
- [CVE-2006-2052](https://insights.sbomify.com/CVE-2006-2052/): Cross-site scripting in verosky media:instant photo gallery (medium 5.8)
- [CVE-2006-2051](https://insights.sbomify.com/CVE-2006-2051/): Cross-site scripting in nextage:nextage shopping cart (medium 5.8)
- [CVE-2006-2050](https://insights.sbomify.com/CVE-2006-2050/): SQL injection in dcscripts:dcforumlite (medium 5.0)
- [CVE-2006-2049](https://insights.sbomify.com/CVE-2006-2049/): Cross-site scripting in dcscripts:dcforumlite (medium 4.3)
- [CVE-2006-2048](https://insights.sbomify.com/CVE-2006-2048/): Cross-site scripting in phpwebftp:phpwebftp (medium 4.3)
- [CVE-2006-2047](https://insights.sbomify.com/CVE-2006-2047/): Information disclosure in application dynamics:cartweaver coldfusion (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/50/