# Vulnerabilities published in 2006


- [CVE-2006-1125](https://insights.sbomify.com/CVE-2006-1125/): Misconfiguration in grisoft:avg antivirus (medium 4.6)
- [CVE-2006-1124](https://insights.sbomify.com/CVE-2006-1124/): Memory corruption in revilloc solutions:revilloc mailserver (high 7.5)
- [CVE-2006-1123](https://insights.sbomify.com/CVE-2006-1123/): SQL injection in d2ksoft:d2kblog (critical 10.0)
- [CVE-2006-1122](https://insights.sbomify.com/CVE-2006-1122/): Cross-site scripting in d2ksoft:d2kblog (medium 6.8)
- [CVE-2006-1121](https://insights.sbomify.com/CVE-2006-1121/): Cross-site scripting in cutephp:cutenews (medium 6.8)
- [CVE-2006-1120](https://insights.sbomify.com/CVE-2006-1120/): Cross-site scripting in codeworx technologies:dcp-portal (low 2.6)
- [CVE-2006-1119](https://insights.sbomify.com/CVE-2006-1119/): Information disclosure in netenberg:fantastico de luxe (medium 4.0)
- [CVE-2006-1118](https://insights.sbomify.com/CVE-2006-1118/): SQL injection in bmail:bmail (medium 5.0)
- [CVE-2006-1117](https://insights.sbomify.com/CVE-2006-1117/): Weak cryptography in ncipher:dse200 document sealing engine (low 2.6)
- [CVE-2006-1116](https://insights.sbomify.com/CVE-2006-1116/): Weak cryptography in ncipher:ncore (medium 5.0)
- [CVE-2006-1115](https://insights.sbomify.com/CVE-2006-1115/): Weak cryptography in ncipher:chil (low 2.6)
- [CVE-2006-1114](https://insights.sbomify.com/CVE-2006-1114/): Path traversal in gerrit van aaken:loudblog (medium 6.4)
- [CVE-2006-1113](https://insights.sbomify.com/CVE-2006-1113/): SQL injection in gerrit van aaken:loudblog (medium 5.0)
- [CVE-2006-1112](https://insights.sbomify.com/CVE-2006-1112/): Information disclosure in aztek forum:aztek forum (medium 5.0)
- [CVE-2006-1111](https://insights.sbomify.com/CVE-2006-1111/): Information disclosure in aztek forum:aztek forum (high 7.5)
- [CVE-2006-1110](https://insights.sbomify.com/CVE-2006-1110/): Cross-site scripting in aztek forum:aztek forum (medium 4.3)
- [CVE-2006-1109](https://insights.sbomify.com/CVE-2006-1109/): SQL injection in totalecommerce:totalecommerce (high 7.5)
- [CVE-2006-1108](https://insights.sbomify.com/CVE-2006-1108/): SQL injection in nmdeluxe:nmdeluxe (high 7.5)
- [CVE-2006-1107](https://insights.sbomify.com/CVE-2006-1107/): Cross-site scripting in nmdeluxe:nmdeluxe (medium 4.3)
- [CVE-2006-1106](https://insights.sbomify.com/CVE-2006-1106/): Cross-site scripting in pixelpost:pixelpost (medium 4.3)
- [CVE-2006-1105](https://insights.sbomify.com/CVE-2006-1105/): Information disclosure in pixelpost:pixelpost (medium 5.0)
- [CVE-2006-1104](https://insights.sbomify.com/CVE-2006-1104/): SQL injection in pixelpost:pixelpost (high 7.5)
- [CVE-2006-1103](https://insights.sbomify.com/CVE-2006-1103/): Null dereference in sauerbraten:cube (medium 5.0)
- [CVE-2006-1102](https://insights.sbomify.com/CVE-2006-1102/): Denial of service in sauerbraten:cube (medium 5.0)
- [CVE-2006-1101](https://insights.sbomify.com/CVE-2006-1101/): Memory corruption in sauerbraten:cube (medium 5.0)
- [CVE-2006-1100](https://insights.sbomify.com/CVE-2006-1100/): Memory corruption in sauerbraten:cube (high 7.5)
- [CVE-2006-1099](https://insights.sbomify.com/CVE-2006-1099/): Code injection in logit:logit (high 7.5)
- [CVE-2006-1098](https://insights.sbomify.com/CVE-2006-1098/): SQL injection in digital builder:nz ecommerce (high 7.5)
- [CVE-2006-1097](https://insights.sbomify.com/CVE-2006-1097/): Cross-site scripting in datenbank module:datenbank module (medium 4.3)
- [CVE-2006-1096](https://insights.sbomify.com/CVE-2006-1096/): Cross-site scripting in digital builder:nz ecommerce (medium 4.3)
- [CVE-2006-1095](https://insights.sbomify.com/CVE-2006-1095/): Path traversal in apache:mod python (high 7.2)
- [CVE-2006-1094](https://insights.sbomify.com/CVE-2006-1094/): SQL injection in datenbank module:datenbank module (high 7.5)
- [CVE-2006-1093](https://insights.sbomify.com/CVE-2006-1093/): Information disclosure in ibm:websphere application server (medium 6.4)
- [CVE-2006-1092](https://insights.sbomify.com/CVE-2006-1092/): Denial of service in sun:solaris (low 2.1)
- [CVE-2006-1091](https://insights.sbomify.com/CVE-2006-1091/): Denial of service in kaspersky lab:kaspersky anti-virus (high 7.8)
- [CVE-2006-1090](https://insights.sbomify.com/CVE-2006-1090/): Denial of service in punbb:punbb (high 7.8)
- [CVE-2006-1089](https://insights.sbomify.com/CVE-2006-1089/): Cross-site scripting in punbb:punbb (medium 4.3)
- [CVE-2006-1088](https://insights.sbomify.com/CVE-2006-1088/): Information disclosure in php-stats:php-stats (medium 5.0)
- [CVE-2006-1087](https://insights.sbomify.com/CVE-2006-1087/): Code injection in php-stats:php-stats (medium 6.5)
- [CVE-2006-1085](https://insights.sbomify.com/CVE-2006-1085/): Auth bypass in php-stats:php-stats (critical 10.0)
- [CVE-2006-1084](https://insights.sbomify.com/CVE-2006-1084/): SQL injection in php-stats:php-stats (high 7.5)
- [CVE-2006-1083](https://insights.sbomify.com/CVE-2006-1083/): Path traversal in php-stats:php-stats (high 7.5)
- [CVE-2006-1082](https://insights.sbomify.com/CVE-2006-1082/): Cross-site scripting in phparcadescript:phparcadescript (medium 4.3)
- [CVE-2006-1081](https://insights.sbomify.com/CVE-2006-1081/): SQL injection in jonathan beckett:pluggedout nexus (high 7.5)
- [CVE-2006-1080](https://insights.sbomify.com/CVE-2006-1080/): Cross-site scripting in game-panel:game-panel (medium 4.3)
- [CVE-2006-1079](https://insights.sbomify.com/CVE-2006-1079/): Command injection in acme labs:thttpd (high 7.2)
- [CVE-2006-1078](https://insights.sbomify.com/CVE-2006-1078/): Memory corruption in acme labs:thttpd (high 8.4)
- [CVE-2006-1077](https://insights.sbomify.com/CVE-2006-1077/): Cross-site scripting in evo-dev:evoblog (medium 4.3)
- [CVE-2006-1076](https://insights.sbomify.com/CVE-2006-1076/): SQL injection in invision power services:invision power board (high 7.5)
- [CVE-2006-1075](https://insights.sbomify.com/CVE-2006-1075/): Memory corruption in jason boettcher:liero xtreme (high 7.5)
- [CVE-2006-1074](https://insights.sbomify.com/CVE-2006-1074/): Denial of service in jason boettcher:liero xtreme (medium 5.0)
- [CVE-2006-1073](https://insights.sbomify.com/CVE-2006-1073/): Path traversal in simplog:simplog (medium 6.4)
- [CVE-2006-1072](https://insights.sbomify.com/CVE-2006-1072/): Cross-site scripting in simplog:simplog (medium 4.3)
- [CVE-2006-1071](https://insights.sbomify.com/CVE-2006-1071/): Cross-site scripting in dvguestbook:dvguestbook (medium 4.3)
- [CVE-2006-1070](https://insights.sbomify.com/CVE-2006-1070/): Cross-site scripting in dvguestbook:dvguestbook (medium 4.3)
- [CVE-2006-1069](https://insights.sbomify.com/CVE-2006-1069/): Privilege escalation in geeklog:geeklog (critical 10.0)
- [CVE-2006-1068](https://insights.sbomify.com/CVE-2006-1068/): Denial of service in netgear:netgear router (medium 4.9)
- [CVE-2006-1067](https://insights.sbomify.com/CVE-2006-1067/): Denial of service in linksys:wrt54g v5 (medium 5.0)
- [CVE-2006-1066](https://insights.sbomify.com/CVE-2006-1066/): Race condition in linux:linux kernel (low 1.2)
- [CVE-2006-1065](https://insights.sbomify.com/CVE-2006-1065/): SQL injection in mybulletinboard:mybulletinboard (medium 5.0)
- [CVE-2006-1064](https://insights.sbomify.com/CVE-2006-1064/): Cross-site scripting in lurker:lurker (low 2.6)
- [CVE-2006-1063](https://insights.sbomify.com/CVE-2006-1063/): Other in lurker:lurker (medium 5.0)
- [CVE-2006-1062](https://insights.sbomify.com/CVE-2006-1062/): Path traversal in lurker:lurker (medium 5.0)
- [CVE-2006-1061](https://insights.sbomify.com/CVE-2006-1061/): Memory corruption in daniel stenberg:curl (high 7.5)
- [CVE-2006-1060](https://insights.sbomify.com/CVE-2006-1060/): Memory corruption in xzgv:xzgv (high 7.5)
- [CVE-2006-1059](https://insights.sbomify.com/CVE-2006-1059/): Information disclosure in samba:samba (low 1.2)
- [CVE-2006-1058](https://insights.sbomify.com/CVE-2006-1058/): Weak cryptography in avaya:aura application enablement services (medium 5.5)
- [CVE-2006-1057](https://insights.sbomify.com/CVE-2006-1057/): Race condition in gnome:gdm (low 3.7)
- [CVE-2006-1056](https://insights.sbomify.com/CVE-2006-1056/): Information disclosure in freebsd:freebsd (low 2.1)
- [CVE-2006-1055](https://insights.sbomify.com/CVE-2006-1055/): Memory corruption in linux:linux kernel (medium 4.9)
- [CVE-2006-1052](https://insights.sbomify.com/CVE-2006-1052/): Security feature bypass in linux:linux kernel (low 2.1)
- [CVE-2006-1051](https://insights.sbomify.com/CVE-2006-1051/): SQL injection in akarru:social bookmarking engine (high 7.5)
- [CVE-2006-1050](https://insights.sbomify.com/CVE-2006-1050/): Misconfiguration in kwik-pay:kwik-pay payroll (low 2.1)
- [CVE-2006-1049](https://insights.sbomify.com/CVE-2006-1049/): SQL injection in joomla:joomla (high 7.5)
- [CVE-2006-1048](https://insights.sbomify.com/CVE-2006-1048/): Missing authorization in joomla:joomla (medium 5.0)
- [CVE-2006-1047](https://insights.sbomify.com/CVE-2006-1047/): Other in joomla:joomla (critical 10.0)
- [CVE-2006-1046](https://insights.sbomify.com/CVE-2006-1046/): Denial of service in monopd:monopd (medium 5.0)
- [CVE-2006-1045](https://insights.sbomify.com/CVE-2006-1045/): Information disclosure in mozilla:thunderbird (low 2.6)
- [CVE-2006-1044](https://insights.sbomify.com/CVE-2006-1044/): Memory corruption in lsoft:listserv (high 7.5)
- [CVE-2006-1043](https://insights.sbomify.com/CVE-2006-1043/): Memory corruption in microsoft:visual interdev (medium 5.1)
- [CVE-2006-1042](https://insights.sbomify.com/CVE-2006-1042/): SQL injection in gregarius:gregarius (medium 6.4)
- [CVE-2006-1041](https://insights.sbomify.com/CVE-2006-1041/): Cross-site scripting in gregarius:gregarius (medium 4.3)
- [CVE-2006-1040](https://insights.sbomify.com/CVE-2006-1040/): Cross-site scripting in jelsoft:vbulletin (medium 4.3)
- [CVE-2006-1039](https://insights.sbomify.com/CVE-2006-1039/): Other in sap:sap web application server (medium 6.4)
- [CVE-2006-1038](https://insights.sbomify.com/CVE-2006-1038/): Memory corruption in van dyke technologies:securecrt (critical 10.0)
- [CVE-2006-1037](https://insights.sbomify.com/CVE-2006-1037/): SQL injection in oracle:diagnostics (high 7.5)
- [CVE-2006-1036](https://insights.sbomify.com/CVE-2006-1036/): Other in oracle:diagnostics (high 7.5)
- [CVE-2006-1035](https://insights.sbomify.com/CVE-2006-1035/): Missing authorization in oracle:diagnostics (high 7.5)
- [CVE-2006-1034](https://insights.sbomify.com/CVE-2006-1034/): Cross-site scripting in woltlab:burning board (medium 4.3)
- [CVE-2006-1033](https://insights.sbomify.com/CVE-2006-1033/): Cross-site scripting in cpg-nuke:dragonfly cms (medium 4.3)
- [CVE-2006-1032](https://insights.sbomify.com/CVE-2006-1032/): Code injection in phprpc:phprpc (high 7.5)
- [CVE-2006-1031](https://insights.sbomify.com/CVE-2006-1031/): Code injection in igenus:igenus webmail (high 7.5)
- [CVE-2006-1030](https://insights.sbomify.com/CVE-2006-1030/): Information disclosure in joomla:joomla (medium 5.0)
- [CVE-2006-1029](https://insights.sbomify.com/CVE-2006-1029/): Denial of service in joomla:joomla (medium 4.3)
- [CVE-2006-1028](https://insights.sbomify.com/CVE-2006-1028/): Denial of service in joomla:joomla (high 7.8)
- [CVE-2006-1027](https://insights.sbomify.com/CVE-2006-1027/): Information disclosure in joomla:joomla (medium 5.0)
- [CVE-2006-1026](https://insights.sbomify.com/CVE-2006-1026/): Auth bypass in jfacets:jfacets (high 7.5)
- [CVE-2006-1025](https://insights.sbomify.com/CVE-2006-1025/): Cross-site scripting in addsoft:storebot (medium 6.8)
- [CVE-2006-1024](https://insights.sbomify.com/CVE-2006-1024/): SQL injection in addsoft:storebot (high 7.5)
- [CVE-2006-1023](https://insights.sbomify.com/CVE-2006-1023/): Path traversal in hp:system management homepage (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/60/