CVE-2006-2495
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-2495
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Serendipity Entry Manager 跨站请求伪造(CSRF) 漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Serendipity 1.0-beta3之前版本的Entry Manager 存在跨站请求伪造(CSRF) 漏洞。 远程攻击者可以借助链接或IMG标签，以登录用户身份执行未授权操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-2495
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-2495
Please Login to view more intelligence information
Same Patch Batch · n/a · 2006-05-20 · 9 CVEs total
| CVE-2006-2492 | Microsoft Word畸形对象指针 缓冲区溢出漏洞 | |
| CVE-2006-2494 | IntelliTamper 多个缓冲区溢出漏洞 | |
| CVE-2006-2496 | Novell eDirectory Server iMonitor超长URI 远程缓冲区溢出漏洞 | |
| CVE-2006-2497 | ASPBB 多个跨站脚本攻击漏洞 | |
| CVE-2006-2498 | Invision Power Board 多个任意PHP代码执行漏洞 | |
| CVE-2006-2499 | CodeAvalanche News Default.ASP SQL注入漏洞 | |
| CVE-2006-2500 | CodeAvalanche News Add_News.ASP 跨站脚本攻击(XSS)漏洞 | |
| CVE-2006-2501 | Sun ONE/Sun Java System 应用程序错误页 跨站脚本攻击漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service - CVE-2026-8267
Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of s - CVE-2026-8266
Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_ - CVE-2026-8261
Squirrel sqobject.cpp Load heap-based overflow - CVE-2026-8258
Squirrel sqstdstring.cpp validate_format stack-based overflo
V. Comments for CVE-2006-2495
No comments yet