# Vulnerabilities published in 2006


- [CVE-2006-1847](https://insights.sbomify.com/CVE-2006-1847/): SQL injection in francisco burzi:php-nuke (high 7.5)
- [CVE-2006-1846](https://insights.sbomify.com/CVE-2006-1846/): Cross-site scripting in francisco burzi:php-nuke (medium 4.3)
- [CVE-2006-1844](https://insights.sbomify.com/CVE-2006-1844/): Information disclosure in debian:base-config (low 2.1)
- [CVE-2006-1843](https://insights.sbomify.com/CVE-2006-1843/): Cross-site scripting in cynical games:shoutbook (low 2.6)
- [CVE-2006-1842](https://insights.sbomify.com/CVE-2006-1842/): Cross-site scripting in cynical games:shoutbook (low 2.6)
- [CVE-2006-1841](https://insights.sbomify.com/CVE-2006-1841/): Cross-site scripting in kailash nadh:boastmachine (low 2.6)
- [CVE-2006-1840](https://insights.sbomify.com/CVE-2006-1840/): Memory corruption in empire server:empire server (medium 6.4)
- [CVE-2006-1839](https://insights.sbomify.com/CVE-2006-1839/): Code injection in php album:php album (high 7.5)
- [CVE-2006-1838](https://insights.sbomify.com/CVE-2006-1838/): Auth bypass in clanscripte.net:fuju news (high 7.5)
- [CVE-2006-1837](https://insights.sbomify.com/CVE-2006-1837/): SQL injection in clanscripte.net:fuju news (high 7.5)
- [CVE-2006-1836](https://insights.sbomify.com/CVE-2006-1836/): Privilege escalation in symantec:liveupdate (medium 6.8)
- [CVE-2006-1835](https://insights.sbomify.com/CVE-2006-1835/): Cross-site scripting in vincent hor:calendarix (low 2.6)
- [CVE-2006-1834](https://insights.sbomify.com/CVE-2006-1834/): Integer overflow in opera:opera browser (medium 5.1)
- [CVE-2006-1833](https://insights.sbomify.com/CVE-2006-1833/): Weak cryptography in netbsd:netbsd (low 2.6)
- [CVE-2006-1832](https://insights.sbomify.com/CVE-2006-1832/): Information disclosure in coder-world:sysinfo (medium 5.0)
- [CVE-2006-1831](https://insights.sbomify.com/CVE-2006-1831/): Code injection in coder-world:sysinfo (high 7.5)
- [CVE-2006-1830](https://insights.sbomify.com/CVE-2006-1830/): Misconfiguration in sun:java studio enterprise (low 3.7)
- [CVE-2006-1829](https://insights.sbomify.com/CVE-2006-1829/): Information disclosure in sybase:easerver (medium 4.0)
- [CVE-2006-1828](https://insights.sbomify.com/CVE-2006-1828/): SQL injection in php121:php121 instant messenger (medium 5.1)
- [CVE-2006-1827](https://insights.sbomify.com/CVE-2006-1827/): Integer overflow in digium:asterisk (medium 6.4)
- [CVE-2006-1826](https://insights.sbomify.com/CVE-2006-1826/): Cross-site scripting in snipegallery:snipe gallery (medium 4.3)
- [CVE-2006-1825](https://insights.sbomify.com/CVE-2006-1825/): Cross-site scripting in phplinks:phplinks (medium 6.8)
- [CVE-2006-1824](https://insights.sbomify.com/CVE-2006-1824/): Cross-site scripting in phpguestbook:phpguestbook (low 1.2)
- [CVE-2006-1823](https://insights.sbomify.com/CVE-2006-1823/): Path traversal in farsinews:farsinews (medium 6.4)
- [CVE-2006-1822](https://insights.sbomify.com/CVE-2006-1822/): Cross-site scripting in farsinews:farsinews (medium 5.8)
- [CVE-2006-1821](https://insights.sbomify.com/CVE-2006-1821/): Path traversal in modxcms:modxcms (medium 6.4)
- [CVE-2006-1820](https://insights.sbomify.com/CVE-2006-1820/): Cross-site scripting in modxcms:modxcms (medium 5.8)
- [CVE-2006-1819](https://insights.sbomify.com/CVE-2006-1819/): Path traversal in phpwebsite:phpwebsite (high 7.5)
- [CVE-2006-1818](https://insights.sbomify.com/CVE-2006-1818/): Cross-site scripting in the war forge:warforge.news (low 2.6)
- [CVE-2006-1817](https://insights.sbomify.com/CVE-2006-1817/): SQL injection in the war forge:warforge.news (low 2.6)
- [CVE-2006-1816](https://insights.sbomify.com/CVE-2006-1816/): Code injection in jelsoft:vbulletin (medium 5.0)
- [CVE-2006-1815](https://insights.sbomify.com/CVE-2006-1815/): Cross-site scripting in tritanium scripts:tritanium bulletin board (low 2.6)
- [CVE-2006-1814](https://insights.sbomify.com/CVE-2006-1814/): Denial of service in netbsd:netbsd (low 2.1)
- [CVE-2006-1813](https://insights.sbomify.com/CVE-2006-1813/): Path traversal in phpwebftp:phpwebftp (medium 6.4)
- [CVE-2006-1812](https://insights.sbomify.com/CVE-2006-1812/): Information disclosure in phpwebftp:phpwebftp (medium 6.4)
- [CVE-2006-1811](https://insights.sbomify.com/CVE-2006-1811/): SQL injection in flexbb:flexbb (medium 6.4)
- [CVE-2006-1810](https://insights.sbomify.com/CVE-2006-1810/): Cross-site scripting in flexbb:flexbb (low 1.9)
- [CVE-2006-1809](https://insights.sbomify.com/CVE-2006-1809/): Information disclosure in lifetype:lifetype (medium 5.0)
- [CVE-2006-1808](https://insights.sbomify.com/CVE-2006-1808/): Cross-site scripting in lifetype:lifetype (low 2.6)
- [CVE-2006-1807](https://insights.sbomify.com/CVE-2006-1807/): SQL injection in musicbox:musicbox (high 7.5)
- [CVE-2006-1806](https://insights.sbomify.com/CVE-2006-1806/): Cross-site scripting in musicbox:musicbox (low 2.6)
- [CVE-2006-1805](https://insights.sbomify.com/CVE-2006-1805/): SQL injection in powerscripts:powerclan (high 7.5)
- [CVE-2006-1804](https://insights.sbomify.com/CVE-2006-1804/): SQL injection in phpmyadmin:phpmyadmin (high 7.5)
- [CVE-2006-1803](https://insights.sbomify.com/CVE-2006-1803/): Cross-site scripting in phpmyadmin:phpmyadmin (medium 4.3)
- [CVE-2006-1802](https://insights.sbomify.com/CVE-2006-1802/): Cross-site scripting in tinywebgallery:tinywebgallery (medium 4.3)
- [CVE-2006-1801](https://insights.sbomify.com/CVE-2006-1801/): Cross-site scripting in planet concept:planetsearch\+ (medium 4.3)
- [CVE-2006-1800](https://insights.sbomify.com/CVE-2006-1800/): Path traversal in simplemedia:simplebbs (high 7.5)
- [CVE-2006-1799](https://insights.sbomify.com/CVE-2006-1799/): Command injection in adcentrix:censtore (high 7.5)
- [CVE-2006-1798](https://insights.sbomify.com/CVE-2006-1798/): SQL injection in rateit:rateit (high 7.5)
- [CVE-2006-1797](https://insights.sbomify.com/CVE-2006-1797/): Null dereference in netbsd:netbsd (medium 4.9)
- [CVE-2006-1796](https://insights.sbomify.com/CVE-2006-1796/): Cross-site scripting in wordpress:wordpress (medium 6.8)
- [CVE-2006-1795](https://insights.sbomify.com/CVE-2006-1795/): Cross-site scripting in updi network enterprise:at1 event publisher (low 2.6)
- [CVE-2006-1794](https://insights.sbomify.com/CVE-2006-1794/): SQL injection in mambo:mambo (high 7.6)
- [CVE-2006-1793](https://insights.sbomify.com/CVE-2006-1793/): Path traversal in runcms:runcms (high 7.6)
- [CVE-2006-1792](https://insights.sbomify.com/CVE-2006-1792/): Auth bypass in mailenable:mailenable enterprise (critical 10.0)
- [CVE-2006-1791](https://insights.sbomify.com/CVE-2006-1791/): Path traversal in jl webworks:quickblogger (high 7.5)
- [CVE-2006-1790](https://insights.sbomify.com/CVE-2006-1790/): Memory corruption in mozilla:firefox (critical 10.0)
- [CVE-2006-1789](https://insights.sbomify.com/CVE-2006-1789/): Path traversal in georges auberger:pajax (medium 5.0)
- [CVE-2006-1788](https://insights.sbomify.com/CVE-2006-1788/): Information disclosure in adobe:document server (low 2.6)
- [CVE-2006-1787](https://insights.sbomify.com/CVE-2006-1787/): Information disclosure in adobe:document server (low 2.6)
- [CVE-2006-1786](https://insights.sbomify.com/CVE-2006-1786/): Cross-site scripting in adobe:document server (low 2.6)
- [CVE-2006-1785](https://insights.sbomify.com/CVE-2006-1785/): Cross-site scripting in adobe:document server (low 2.1)
- [CVE-2006-1784](https://insights.sbomify.com/CVE-2006-1784/): Code injection in sphider:sphider (medium 5.1)
- [CVE-2006-1783](https://insights.sbomify.com/CVE-2006-1783/): Cross-site scripting in patronet:cms (low 2.6)
- [CVE-2006-1782](https://insights.sbomify.com/CVE-2006-1782/): Information disclosure in sun:solaris (low 2.1)
- [CVE-2006-1781](https://insights.sbomify.com/CVE-2006-1781/): Code injection in circle r:monster top list (high 7.5)
- [CVE-2006-1780](https://insights.sbomify.com/CVE-2006-1780/): Denial of service in sun:solaris (low 2.1)
- [CVE-2006-1779](https://insights.sbomify.com/CVE-2006-1779/): Cross-site scripting in simplog:simplog (medium 6.8)
- [CVE-2006-1778](https://insights.sbomify.com/CVE-2006-1778/): SQL injection in simplog:simplog (high 7.5)
- [CVE-2006-1777](https://insights.sbomify.com/CVE-2006-1777/): Path traversal in simplog:simplog (high 7.5)
- [CVE-2006-1776](https://insights.sbomify.com/CVE-2006-1776/): Code injection in simplog:simplog (high 7.5)
- [CVE-2006-1775](https://insights.sbomify.com/CVE-2006-1775/): Cross-site scripting in phpbb group:phpbb (medium 4.3)
- [CVE-2006-1774](https://insights.sbomify.com/CVE-2006-1774/): Auth bypass in hp:compaqhttpserver (high 7.5)
- [CVE-2006-1773](https://insights.sbomify.com/CVE-2006-1773/): SQL injection in phpkit:phpkit (medium 6.4)
- [CVE-2006-1772](https://insights.sbomify.com/CVE-2006-1772/): Information disclosure in debian:debian linux (high 7.2)
- [CVE-2006-1771](https://insights.sbomify.com/CVE-2006-1771/): Path traversal in saxotech:saxopress (high 7.5)
- [CVE-2006-1770](https://insights.sbomify.com/CVE-2006-1770/): Code injection in azerbaijan development group:azdgvote (critical 10.0)
- [CVE-2006-1769](https://insights.sbomify.com/CVE-2006-1769/): Cross-site scripting in userland:manila (medium 6.8)
- [CVE-2006-1768](https://insights.sbomify.com/CVE-2006-1768/): Cross-site scripting in tritanium scripts:tritanium bulletin board (medium 5.1)
- [CVE-2006-1767](https://insights.sbomify.com/CVE-2006-1767/): Code injection in nicecoder:indexu (high 7.5)
- [CVE-2006-1766](https://insights.sbomify.com/CVE-2006-1766/): SQL injection in papoo:papoo (medium 6.4)
- [CVE-2006-1765](https://insights.sbomify.com/CVE-2006-1765/): Cross-site scripting in jbook:jbook (medium 6.8)
- [CVE-2006-1764](https://insights.sbomify.com/CVE-2006-1764/): Information disclosure in hosting controller:hosting controller (high 7.8)
- [CVE-2006-1763](https://insights.sbomify.com/CVE-2006-1763/): SQL injection in blursoft:blur6ex (medium 5.0)
- [CVE-2006-1762](https://insights.sbomify.com/CVE-2006-1762/): Path traversal in blursoft:blur6ex (high 7.5)
- [CVE-2006-1761](https://insights.sbomify.com/CVE-2006-1761/): Cross-site scripting in blursoft:blur6ex (low 2.6)
- [CVE-2006-1760](https://insights.sbomify.com/CVE-2006-1760/): Cross-site scripting in jetphotosoft.com:jetphoto (medium 4.3)
- [CVE-2006-1759](https://insights.sbomify.com/CVE-2006-1759/): Cross-site scripting in swsoft:confixx (low 2.6)
- [CVE-2006-1758](https://insights.sbomify.com/CVE-2006-1758/): SQL injection in bill shupp:vegadns (high 7.5)
- [CVE-2006-1757](https://insights.sbomify.com/CVE-2006-1757/): Cross-site scripting in bill shupp:vegadns (low 2.6)
- [CVE-2006-1756](https://insights.sbomify.com/CVE-2006-1756/): Auth bypass in matthew dingley:md news (high 7.5)
- [CVE-2006-1755](https://insights.sbomify.com/CVE-2006-1755/): SQL injection in matthew dingley:md news (high 7.5)
- [CVE-2006-1754](https://insights.sbomify.com/CVE-2006-1754/): SQL injection in swsoft:confixx (high 7.5)
- [CVE-2006-1753](https://insights.sbomify.com/CVE-2006-1753/): Race condition in debian:debian linux (low 3.6)
- [CVE-2006-1752](https://insights.sbomify.com/CVE-2006-1752/): Cross-site scripting in michiel van baak:mvblog (low 2.6)
- [CVE-2006-1751](https://insights.sbomify.com/CVE-2006-1751/): SQL injection in michiel van baak:mvblog (high 7.5)
- [CVE-2006-1750](https://insights.sbomify.com/CVE-2006-1750/): Cross-site scripting in jmb software:autogallery (low 2.6)
- [CVE-2006-1749](https://insights.sbomify.com/CVE-2006-1749/): Code injection in smartisoft:phplistpro (high 7.5)
- [CVE-2006-1748](https://insights.sbomify.com/CVE-2006-1748/): Cross-site scripting in xmb software:xmb forum (low 2.6)
- [CVE-2006-1747](https://insights.sbomify.com/CVE-2006-1747/): Code injection in vwar:virtual war (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/53/