# Vulnerabilities published in 2006


- [CVE-2006-1645](https://insights.sbomify.com/CVE-2006-1645/): Cross-site scripting in reloadcms:reloadcms (medium 6.8)
- [CVE-2006-1644](https://insights.sbomify.com/CVE-2006-1644/): Information disclosure in interact:interact (medium 5.0)
- [CVE-2006-1643](https://insights.sbomify.com/CVE-2006-1643/): SQL injection in interact:interact (high 7.5)
- [CVE-2006-1642](https://insights.sbomify.com/CVE-2006-1642/): Cross-site scripting in interact:interact (low 2.6)
- [CVE-2006-1641](https://insights.sbomify.com/CVE-2006-1641/): SQL injection in czaries network:czarnews (medium 5.1)
- [CVE-2006-1640](https://insights.sbomify.com/CVE-2006-1640/): Cross-site scripting in czaries network:czarnews (low 2.6)
- [CVE-2006-1639](https://insights.sbomify.com/CVE-2006-1639/): SQL injection in wire plastik design:wpblog (medium 5.1)
- [CVE-2006-1638](https://insights.sbomify.com/CVE-2006-1638/): SQL injection in aweb labs:awebbb (medium 5.1)
- [CVE-2006-1637](https://insights.sbomify.com/CVE-2006-1637/): Cross-site scripting in aweb labs:awebbb (medium 4.3)
- [CVE-2006-1636](https://insights.sbomify.com/CVE-2006-1636/): Code injection in vwar:virtual war (high 7.5)
- [CVE-2006-1635](https://insights.sbomify.com/CVE-2006-1635/): Information disclosure in lucidcms:lucidcms (medium 5.0)
- [CVE-2006-1634](https://insights.sbomify.com/CVE-2006-1634/): Cross-site scripting in lucidcms:lucidcms (medium 4.3)
- [CVE-2006-1631](https://insights.sbomify.com/CVE-2006-1631/): Denial of service in cisco:content services switch 11500 (medium 5.0)
- [CVE-2006-1630](https://insights.sbomify.com/CVE-2006-1630/): Memory corruption in clam anti-virus:clamav (medium 5.0)
- [CVE-2006-1629](https://insights.sbomify.com/CVE-2006-1629/): Code injection in openvpn:openvpn (critical 9.0)
- [CVE-2006-1628](https://insights.sbomify.com/CVE-2006-1628/): Auth bypass in adobe:livecycle form manager (medium 4.6)
- [CVE-2006-1627](https://insights.sbomify.com/CVE-2006-1627/): Missing authorization in adobe:acrobat reader (high 7.5)
- [CVE-2006-1626](https://insights.sbomify.com/CVE-2006-1626/): Security feature bypass in microsoft:internet explorer (medium 4.3)
- [CVE-2006-1625](https://insights.sbomify.com/CVE-2006-1625/): Cross-site scripting in mybulletinboard:mybulletinboard (medium 6.8)
- [CVE-2006-1624](https://insights.sbomify.com/CVE-2006-1624/): Misconfiguration in linux:linux kernel (high 7.8)
- [CVE-2006-1623](https://insights.sbomify.com/CVE-2006-1623/): Code injection in andries bruinsma:flexible development (medium 4.3)
- [CVE-2006-1622](https://insights.sbomify.com/CVE-2006-1622/): Cross-site scripting in phpselect:phpselect (medium 6.8)
- [CVE-2006-1621](https://insights.sbomify.com/CVE-2006-1621/): Path traversal in hosting controller:hosting controller (medium 4.0)
- [CVE-2006-1620](https://insights.sbomify.com/CVE-2006-1620/): Missing authorization in hosting controller:hosting controller (medium 5.0)
- [CVE-2006-1619](https://insights.sbomify.com/CVE-2006-1619/): Denial of service in ibm:websphere application server (medium 5.0)
- [CVE-2006-1618](https://insights.sbomify.com/CVE-2006-1618/): Memory corruption in doomsday:doomsday (high 7.5)
- [CVE-2006-1617](https://insights.sbomify.com/CVE-2006-1617/): Cross-site scripting in advanced poll:advanced poll (medium 4.3)
- [CVE-2006-1616](https://insights.sbomify.com/CVE-2006-1616/): SQL injection in advanced poll:advanced poll (high 7.5)
- [CVE-2006-1615](https://insights.sbomify.com/CVE-2006-1615/): Memory corruption in clamav:clamav (critical 10.0)
- [CVE-2006-1614](https://insights.sbomify.com/CVE-2006-1614/): Integer overflow in clam anti-virus:clamav (medium 5.1)
- [CVE-2006-1613](https://insights.sbomify.com/CVE-2006-1613/): SQL injection in aweb labs:awebnews (medium 5.0)
- [CVE-2006-1612](https://insights.sbomify.com/CVE-2006-1612/): Cross-site scripting in aweb labs:awebnews (medium 5.1)
- [CVE-2006-1611](https://insights.sbomify.com/CVE-2006-1611/): Path traversal in kgb:archiver (medium 5.0)
- [CVE-2006-1610](https://insights.sbomify.com/CVE-2006-1610/): Code injection in squery:squery (medium 5.1)
- [CVE-2006-1609](https://insights.sbomify.com/CVE-2006-1609/): Denial of service in hitachi:xfit s (medium 5.0)
- [CVE-2006-1608](https://insights.sbomify.com/CVE-2006-1608/): Security feature bypass in php:php (low 2.1)
- [CVE-2006-1607](https://insights.sbomify.com/CVE-2006-1607/): Code injection in exponent:exponent cms (high 7.5)
- [CVE-2006-1606](https://insights.sbomify.com/CVE-2006-1606/): Information disclosure in exponent:exponent cms (medium 5.0)
- [CVE-2006-1605](https://insights.sbomify.com/CVE-2006-1605/): Code injection in exponent:exponent cms (high 7.5)
- [CVE-2006-1604](https://insights.sbomify.com/CVE-2006-1604/): Other in exponent:exponent cms (critical 10.0)
- [CVE-2006-1603](https://insights.sbomify.com/CVE-2006-1603/): Cross-site scripting in phpbb group:phpbb (medium 4.3)
- [CVE-2006-1602](https://insights.sbomify.com/CVE-2006-1602/): Code injection in phpnuke-clan:phpnuke-clan (high 7.5)
- [CVE-2006-1601](https://insights.sbomify.com/CVE-2006-1601/): Information disclosure in sun:cluster (low 1.7)
- [CVE-2006-1600](https://insights.sbomify.com/CVE-2006-1600/): SQL injection in phpwebgallery:phpwebgallery (high 7.5)
- [CVE-2006-1599](https://insights.sbomify.com/CVE-2006-1599/): Command injection in v-creator.com:v-creator (high 7.5)
- [CVE-2006-1598](https://insights.sbomify.com/CVE-2006-1598/): Information disclosure in an:an-httpd (high 7.8)
- [CVE-2006-1596](https://insights.sbomify.com/CVE-2006-1596/): Code injection in claroline:claroline (high 7.5)
- [CVE-2006-1595](https://insights.sbomify.com/CVE-2006-1595/): Path traversal in claroline:claroline (medium 4.3)
- [CVE-2006-1594](https://insights.sbomify.com/CVE-2006-1594/): Path traversal in claroline:claroline (high 7.5)
- [CVE-2006-1593](https://insights.sbomify.com/CVE-2006-1593/): Memory corruption in x-doom:x-doom (medium 5.0)
- [CVE-2006-1592](https://insights.sbomify.com/CVE-2006-1592/): Memory corruption in x-doom:x-doom (high 7.5)
- [CVE-2006-1591](https://insights.sbomify.com/CVE-2006-1591/): Memory corruption in microsoft:windows 2000 (medium 5.1)
- [CVE-2006-1590](https://insights.sbomify.com/CVE-2006-1590/): Cross-site scripting in kevin johnson:basic analysis and security engine (medium 4.3)
- [CVE-2006-1589](https://insights.sbomify.com/CVE-2006-1589/): Null dereference in netbsd:netbsd (medium 4.9)
- [CVE-2006-1588](https://insights.sbomify.com/CVE-2006-1588/): Information disclosure in netbsd:netbsd (low 2.1)
- [CVE-2006-1587](https://insights.sbomify.com/CVE-2006-1587/): Misconfiguration in netbsd:netbsd (low 2.1)
- [CVE-2006-1586](https://insights.sbomify.com/CVE-2006-1586/): SQL injection in internet solutions professionals:site man (high 7.5)
- [CVE-2006-1585](https://insights.sbomify.com/CVE-2006-1585/): SQL injection in 3dsrc:monalbum (medium 6.4)
- [CVE-2006-1584](https://insights.sbomify.com/CVE-2006-1584/): Cross-site scripting in juliusz julas gonera:warcraft iii replay parser php (medium 6.4)
- [CVE-2006-1583](https://insights.sbomify.com/CVE-2006-1583/): Cross-site scripting in juliusz julas gonera:warcraft iii replay parser php (medium 5.8)
- [CVE-2006-1582](https://insights.sbomify.com/CVE-2006-1582/): Cross-site scripting in blanknberg:blanknberg (medium 5.8)
- [CVE-2006-1581](https://insights.sbomify.com/CVE-2006-1581/): Path traversal in blanknberg:blanknberg (medium 6.4)
- [CVE-2006-1580](https://insights.sbomify.com/CVE-2006-1580/): Cross-site scripting in websina:bugzero (medium 5.8)
- [CVE-2006-1579](https://insights.sbomify.com/CVE-2006-1579/): SQL injection in dbbs:dbbs (high 7.5)
- [CVE-2006-1578](https://insights.sbomify.com/CVE-2006-1578/): SQL injection in index data aps:keystone digital library suite (medium 6.4)
- [CVE-2006-1577](https://insights.sbomify.com/CVE-2006-1577/): Cross-site scripting in mantis:mantis (medium 6.8)
- [CVE-2006-1576](https://insights.sbomify.com/CVE-2006-1576/): Code injection in vscripts.pl:qlnews (high 7.5)
- [CVE-2006-1575](https://insights.sbomify.com/CVE-2006-1575/): Cross-site scripting in vscripts.pl:qlnews (medium 6.8)
- [CVE-2006-1574](https://insights.sbomify.com/CVE-2006-1574/): Cross-site scripting in hitachi:groupmax world wide web (medium 5.8)
- [CVE-2006-1573](https://insights.sbomify.com/CVE-2006-1573/): Code injection in mediaslash.com:mediaslash gallery (high 7.5)
- [CVE-2006-1572](https://insights.sbomify.com/CVE-2006-1572/): SQL injection in o2php.com:oxygen (medium 5.0)
- [CVE-2006-1571](https://insights.sbomify.com/CVE-2006-1571/): SQL injection in r2xdesign:qlitenews (medium 5.1)
- [CVE-2006-1570](https://insights.sbomify.com/CVE-2006-1570/): Cross-site scripting in esqlanelapse:esqlanelapse (medium 4.3)
- [CVE-2006-1569](https://insights.sbomify.com/CVE-2006-1569/): SQL injection in redcms:redcms (medium 5.1)
- [CVE-2006-1568](https://insights.sbomify.com/CVE-2006-1568/): Cross-site scripting in redcms:redcms (medium 5.1)
- [CVE-2006-1567](https://insights.sbomify.com/CVE-2006-1567/): Cross-site scripting in sitesearch:indexer (medium 4.3)
- [CVE-2006-1566](https://insights.sbomify.com/CVE-2006-1566/): Privilege escalation in debian:debian linux (medium 4.6)
- [CVE-2006-1565](https://insights.sbomify.com/CVE-2006-1565/): Privilege escalation in debian:debian linux (medium 4.6)
- [CVE-2006-1564](https://insights.sbomify.com/CVE-2006-1564/): Privilege escalation in debian:debian linux (medium 4.6)
- [CVE-2006-1563](https://insights.sbomify.com/CVE-2006-1563/): Code injection in vscripts:vbook (high 7.6)
- [CVE-2006-1562](https://insights.sbomify.com/CVE-2006-1562/): Cross-site scripting in vscripts:vbook (medium 6.8)
- [CVE-2006-1561](https://insights.sbomify.com/CVE-2006-1561/): SQL injection in vscripts:vbook (medium 5.1)
- [CVE-2006-1560](https://insights.sbomify.com/CVE-2006-1560/): SQL injection in skintech:phpnewsmanager (high 7.5)
- [CVE-2006-1559](https://insights.sbomify.com/CVE-2006-1559/): SQL injection in php:php script index (high 7.5)
- [CVE-2006-1558](https://insights.sbomify.com/CVE-2006-1558/): Cross-site scripting in php:php script index (medium 6.8)
- [CVE-2006-1557](https://insights.sbomify.com/CVE-2006-1557/): SQL injection in skintech:x-changer (high 7.5)
- [CVE-2006-1556](https://insights.sbomify.com/CVE-2006-1556/): Cross-site scripting in al-caricatier:al-caricatier (medium 6.8)
- [CVE-2006-1555](https://insights.sbomify.com/CVE-2006-1555/): Auth bypass in tachyon:vsns lemon (high 7.5)
- [CVE-2006-1554](https://insights.sbomify.com/CVE-2006-1554/): Cross-site scripting in tachyon:vsns lemon (low 2.6)
- [CVE-2006-1553](https://insights.sbomify.com/CVE-2006-1553/): SQL injection in tachyon:vsns lemon (medium 5.1)
- [CVE-2006-1552](https://insights.sbomify.com/CVE-2006-1552/): Integer overflow in apple:imageio (medium 5.0)
- [CVE-2006-1551](https://insights.sbomify.com/CVE-2006-1551/): Code injection in georges auberger:pajax (high 7.5)
- [CVE-2006-1550](https://insights.sbomify.com/CVE-2006-1550/): Memory corruption in dia:dia (high 7.6)
- [CVE-2006-1549](https://insights.sbomify.com/CVE-2006-1549/): Denial of service in php:php (low 2.1)
- [CVE-2006-1548](https://insights.sbomify.com/CVE-2006-1548/): Cross-site scripting in Apache Struts (medium 4.3)
- [CVE-2006-1547](https://insights.sbomify.com/CVE-2006-1547/): Apache Struts 1 ActionForm Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2006-1546](https://insights.sbomify.com/CVE-2006-1546/): Apache Struts vulnerable to Improper Input Validation (high 7.5)
- [CVE-2006-1545](https://insights.sbomify.com/CVE-2006-1545/): Code injection in vscripts:vnews (critical 9.0)
- [CVE-2006-1544](https://insights.sbomify.com/CVE-2006-1544/): Cross-site scripting in vscripts:vnews (medium 4.3)
- [CVE-2006-1543](https://insights.sbomify.com/CVE-2006-1543/): SQL injection in vscripts:vnews (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/55/