# Vulnerabilities published in 2006


- [CVE-2006-0920](https://insights.sbomify.com/CVE-2006-0920/): Information disclosure in oi:email marketing system (low 1.7)
- [CVE-2006-0919](https://insights.sbomify.com/CVE-2006-0919/): SQL injection in oi:email marketing system (high 7.5)
- [CVE-2006-0918](https://insights.sbomify.com/CVE-2006-0918/): Memory corruption in ritlabs:the bat (high 7.5)
- [CVE-2006-0917](https://insights.sbomify.com/CVE-2006-0917/): Information disclosure in melange:melange chat system (low 2.1)
- [CVE-2006-0916](https://insights.sbomify.com/CVE-2006-0916/): Open redirect in mozilla:bugzilla (high 7.5)
- [CVE-2006-0915](https://insights.sbomify.com/CVE-2006-0915/): SQL injection in mozilla:bugzilla (high 7.5)
- [CVE-2006-0914](https://insights.sbomify.com/CVE-2006-0914/): SQL injection in mozilla:bugzilla (medium 5.5)
- [CVE-2006-0913](https://insights.sbomify.com/CVE-2006-0913/): SQL injection in mozilla:bugzilla (medium 5.5)
- [CVE-2006-0912](https://insights.sbomify.com/CVE-2006-0912/): Denial of service in oreka:oreka (medium 5.0)
- [CVE-2006-0911](https://insights.sbomify.com/CVE-2006-0911/): Denial of service in ipswitch:whatsup (medium 5.0)
- [CVE-2006-0910](https://insights.sbomify.com/CVE-2006-0910/): Information disclosure in invision power services:invision power board (medium 5.0)
- [CVE-2006-0909](https://insights.sbomify.com/CVE-2006-0909/): Information disclosure in invision power services:invision power board (medium 5.0)
- [CVE-2006-0908](https://insights.sbomify.com/CVE-2006-0908/): SQL injection in francisco burzi:php-nuke (high 7.5)
- [CVE-2006-0907](https://insights.sbomify.com/CVE-2006-0907/): SQL injection in francisco burzi:php-nuke (high 7.5)
- [CVE-2006-0906](https://insights.sbomify.com/CVE-2006-0906/): SQL injection in top line:d3jeeb pro (high 7.5)
- [CVE-2006-0905](https://insights.sbomify.com/CVE-2006-0905/): Security feature bypass in freebsd:freebsd (high 7.5)
- [CVE-2006-0903](https://insights.sbomify.com/CVE-2006-0903/): Security feature bypass in mysql:mysql (medium 4.6)
- [CVE-2006-0901](https://insights.sbomify.com/CVE-2006-0901/): Other in sun:solaris (high 7.2)
- [CVE-2006-0900](https://insights.sbomify.com/CVE-2006-0900/): Denial of service in freebsd:freebsd (high 7.8)
- [CVE-2006-0899](https://insights.sbomify.com/CVE-2006-0899/): Path traversal in 4images:image gallery management system (high 7.5)
- [CVE-2006-0898](https://insights.sbomify.com/CVE-2006-0898/): Weak cryptography in lincoln d. stein:crypt cbc (low 2.6)
- [CVE-2006-0897](https://insights.sbomify.com/CVE-2006-0897/): SQL injection in virtual communication services:vpmi enterprise (high 7.5)
- [CVE-2006-0896](https://insights.sbomify.com/CVE-2006-0896/): Cross-site scripting in simple machines:simple machines forum (medium 4.3)
- [CVE-2006-0895](https://insights.sbomify.com/CVE-2006-0895/): Information disclosure in nocc:nocc (medium 5.0)
- [CVE-2006-0894](https://insights.sbomify.com/CVE-2006-0894/): Cross-site scripting in nocc:nocc (medium 4.3)
- [CVE-2006-0893](https://insights.sbomify.com/CVE-2006-0893/): Information disclosure in nocc:nocc (medium 5.0)
- [CVE-2006-0892](https://insights.sbomify.com/CVE-2006-0892/): Information disclosure in nocc:nocc (high 7.5)
- [CVE-2006-0891](https://insights.sbomify.com/CVE-2006-0891/): Path traversal in nocc:nocc (medium 5.0)
- [CVE-2006-0890](https://insights.sbomify.com/CVE-2006-0890/): Path traversal in speedproject:speedcommander (medium 5.0)
- [CVE-2006-0889](https://insights.sbomify.com/CVE-2006-0889/): Cross-site scripting in brown bear software:calcium (medium 4.3)
- [CVE-2006-0888](https://insights.sbomify.com/CVE-2006-0888/): Denial of service in invision power services:invision power board (low 2.6)
- [CVE-2006-0887](https://insights.sbomify.com/CVE-2006-0887/): Code injection in phplib team:phplib (high 7.5)
- [CVE-2006-0886](https://insights.sbomify.com/CVE-2006-0886/): Cross-site scripting in dev:dev web management system (medium 4.3)
- [CVE-2006-0885](https://insights.sbomify.com/CVE-2006-0885/): Cross-site scripting in cutephp:cutenews (medium 4.3)
- [CVE-2006-0884](https://insights.sbomify.com/CVE-2006-0884/): Security feature bypass in mozilla:thunderbird (critical 9.3)
- [CVE-2006-0883](https://insights.sbomify.com/CVE-2006-0883/): Denial of service in freebsd:freebsd (medium 5.0)
- [CVE-2006-0882](https://insights.sbomify.com/CVE-2006-0882/): Path traversal in phpoutsourcing:noahs classifieds (medium 5.0)
- [CVE-2006-0881](https://insights.sbomify.com/CVE-2006-0881/): Code injection in phpoutsourcing:noahs classifieds (high 7.5)
- [CVE-2006-0880](https://insights.sbomify.com/CVE-2006-0880/): Cross-site scripting in phpoutsourcing:noahs classifieds (medium 4.3)
- [CVE-2006-0879](https://insights.sbomify.com/CVE-2006-0879/): SQL injection in phpoutsourcing:noahs classifieds (high 7.5)
- [CVE-2006-0878](https://insights.sbomify.com/CVE-2006-0878/): Information disclosure in phpoutsourcing:noahs classifieds (medium 5.0)
- [CVE-2006-0877](https://insights.sbomify.com/CVE-2006-0877/): Cross-site scripting in easy forum:easy forum (medium 5.0)
- [CVE-2006-0876](https://insights.sbomify.com/CVE-2006-0876/): Denial of service in popfile:popfile (medium 5.0)
- [CVE-2006-0875](https://insights.sbomify.com/CVE-2006-0875/): Cross-site scripting in runcms:runcms (medium 5.0)
- [CVE-2006-0874](https://insights.sbomify.com/CVE-2006-0874/): Other in intensive point:iuser ecommerce (critical 10.0)
- [CVE-2006-0873](https://insights.sbomify.com/CVE-2006-0873/): Path traversal in coppermine:coppermine photo gallery (medium 5.0)
- [CVE-2006-0872](https://insights.sbomify.com/CVE-2006-0872/): Path traversal in coppermine:coppermine photo gallery (medium 5.0)
- [CVE-2006-0871](https://insights.sbomify.com/CVE-2006-0871/): Path traversal in mambo:mambo (medium 6.4)
- [CVE-2006-0870](https://insights.sbomify.com/CVE-2006-0870/): SQL injection in mini-nuke:mini-nuke cms (high 7.5)
- [CVE-2006-0869](https://insights.sbomify.com/CVE-2006-0869/): Path traversal in pear:pear liveuser (medium 6.4)
- [CVE-2006-0868](https://insights.sbomify.com/CVE-2006-0868/): PEAR::Auth potential authentication bypass vulnerability (high 7.5)
- [CVE-2006-0867](https://insights.sbomify.com/CVE-2006-0867/): Memory corruption in south river:webdrive (medium 5.0)
- [CVE-2006-0866](https://insights.sbomify.com/CVE-2006-0866/): Weak cryptography in punbb:punbb (medium 5.0)
- [CVE-2006-0865](https://insights.sbomify.com/CVE-2006-0865/): Denial of service in punbb:punbb (medium 5.0)
- [CVE-2006-0864](https://insights.sbomify.com/CVE-2006-0864/): Auth bypass in hauri:virobot (critical 10.0)
- [CVE-2006-0863](https://insights.sbomify.com/CVE-2006-0863/): Information disclosure in infovista:portalse (medium 5.0)
- [CVE-2006-0862](https://insights.sbomify.com/CVE-2006-0862/): Path traversal in infovista:portalse (medium 5.0)
- [CVE-2006-0861](https://insights.sbomify.com/CVE-2006-0861/): Information disclosure in michael salzer:guestbox (medium 5.0)
- [CVE-2006-0860](https://insights.sbomify.com/CVE-2006-0860/): Cross-site scripting in michael salzer:guestbox (medium 4.3)
- [CVE-2006-0859](https://insights.sbomify.com/CVE-2006-0859/): Missing authorization in michael salzer:guestbox (medium 5.0)
- [CVE-2006-0858](https://insights.sbomify.com/CVE-2006-0858/): Privilege escalation in starforce:safe n sec personal \+ anti-spyware (high 7.2)
- [CVE-2006-0857](https://insights.sbomify.com/CVE-2006-0857/): Cross-site scripting in e107:chatbox plugin (medium 4.3)
- [CVE-2006-0856](https://insights.sbomify.com/CVE-2006-0856/): SQL injection in scriptme:sme gb host (high 7.5)
- [CVE-2006-0855](https://insights.sbomify.com/CVE-2006-0855/): Memory corruption in rahul dhesi:zoo (medium 5.1)
- [CVE-2006-0854](https://insights.sbomify.com/CVE-2006-0854/): Code injection in intensive point:iuser ecommerce (high 7.5)
- [CVE-2006-0853](https://insights.sbomify.com/CVE-2006-0853/): Memory corruption in truenorth software:ia emailserver (medium 6.5)
- [CVE-2006-0852](https://insights.sbomify.com/CVE-2006-0852/): Code injection in devscripts:admbook (high 7.5)
- [CVE-2006-0851](https://insights.sbomify.com/CVE-2006-0851/): SQL injection in ilch.de:ilchclan (high 7.5)
- [CVE-2006-0850](https://insights.sbomify.com/CVE-2006-0850/): SQL injection in ilch.de:ilchclan (high 7.5)
- [CVE-2006-0848](https://insights.sbomify.com/CVE-2006-0848/): Command injection in apple:mac os x (medium 5.1)
- [CVE-2006-0847](https://insights.sbomify.com/CVE-2006-0847/): CherryPy Directory traversal vulnerability (medium 5.0)
- [CVE-2006-0846](https://insights.sbomify.com/CVE-2006-0846/): Cross-site scripting in leif m. wright:web blog (medium 4.3)
- [CVE-2006-0845](https://insights.sbomify.com/CVE-2006-0845/): Command injection in leif m. wright:web blog (medium 6.5)
- [CVE-2006-0844](https://insights.sbomify.com/CVE-2006-0844/): Auth bypass in leif m. wright:web blog (high 7.5)
- [CVE-2006-0843](https://insights.sbomify.com/CVE-2006-0843/): Information disclosure in leif m. wright:web blog (medium 5.0)
- [CVE-2006-0842](https://insights.sbomify.com/CVE-2006-0842/): Cross-site scripting in calacode:atmail webmail system (medium 4.3)
- [CVE-2006-0841](https://insights.sbomify.com/CVE-2006-0841/): Cross-site scripting in mantis:mantis (medium 4.3)
- [CVE-2006-0840](https://insights.sbomify.com/CVE-2006-0840/): Other in mantis:mantis (medium 5.0)
- [CVE-2006-0839](https://insights.sbomify.com/CVE-2006-0839/): Security feature bypass in sourcefire:snort (medium 5.0)
- [CVE-2006-0838](https://insights.sbomify.com/CVE-2006-0838/): Information disclosure in micromuse:netcool neusecure (low 2.1)
- [CVE-2006-0837](https://insights.sbomify.com/CVE-2006-0837/): Misconfiguration in micromuse:netcool neusecure (low 2.1)
- [CVE-2006-0836](https://insights.sbomify.com/CVE-2006-0836/): Denial of service in mozilla:thunderbird (low 2.6)
- [CVE-2006-0835](https://insights.sbomify.com/CVE-2006-0835/): SQL injection in mitridat:web calendar pro (high 7.5)
- [CVE-2006-0834](https://insights.sbomify.com/CVE-2006-0834/): Hardcoded credentials in uniden:uip1868p (high 7.5)
- [CVE-2006-0833](https://insights.sbomify.com/CVE-2006-0833/): Cross-site scripting in boonex:barracuda directory (medium 4.3)
- [CVE-2006-0832](https://insights.sbomify.com/CVE-2006-0832/): SQL injection in wpc.easy:wpc.easy (high 7.5)
- [CVE-2006-0831](https://insights.sbomify.com/CVE-2006-0831/): Code injection in tasarim rehberi:tasarim rehberi (high 7.5)
- [CVE-2006-0830](https://insights.sbomify.com/CVE-2006-0830/): Denial of service in microsoft:internet explorer (high 7.5)
- [CVE-2006-0829](https://insights.sbomify.com/CVE-2006-0829/): Cross-site scripting in e-blah:platinum (medium 5.0)
- [CVE-2006-0828](https://insights.sbomify.com/CVE-2006-0828/): Other in xerox:workcentre 232 (medium 5.0)
- [CVE-2006-0827](https://insights.sbomify.com/CVE-2006-0827/): Cross-site scripting in xerox:workcentre 232 (medium 5.0)
- [CVE-2006-0826](https://insights.sbomify.com/CVE-2006-0826/): Denial of service in xerox:workcentre 232 (medium 5.0)
- [CVE-2006-0825](https://insights.sbomify.com/CVE-2006-0825/): Auth bypass in xerox:workcentre 232 (high 7.5)
- [CVE-2006-0824](https://insights.sbomify.com/CVE-2006-0824/): Code injection in geeklog:geeklog (high 7.5)
- [CVE-2006-0823](https://insights.sbomify.com/CVE-2006-0823/): SQL injection in geeklog:geeklog (high 7.5)
- [CVE-2006-0822](https://insights.sbomify.com/CVE-2006-0822/): Denial of service in emulinker kaillera server:emulinker kaillera server (medium 5.0)
- [CVE-2006-0821](https://insights.sbomify.com/CVE-2006-0821/): SQL injection in bxcp:bxcp (high 7.5)
- [CVE-2006-0820](https://insights.sbomify.com/CVE-2006-0820/): Cross-site scripting in gnome:dwarf http server (medium 4.3)
- [CVE-2006-0819](https://insights.sbomify.com/CVE-2006-0819/): Information disclosure in gnome:dwarf http server (high 7.8)
- [CVE-2006-0818](https://insights.sbomify.com/CVE-2006-0818/): Path traversal in deerfield:visnetic mail server (medium 4.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/62/