CVE-2006-0044

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-18 · updated 2026-06-16

Description

Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commands via unspecified vectors involving template files and the "handling of submitted form fields".

Affected products

Albatross: 1.00, 1.01, 1.10, 1.20, 1.30, 1.32

References

http://secunia.com/advisories/18457
http://secunia.com/advisories/18496
http://security.debian.org/pool/updates/main/a/albatross/albatross_1.20-2.diff.gz
http://www.debian.org/security/2006/dsa-942
http://www.object-craft.com.au/projects/albatross/news.html
http://www.osvdb.org/22451
http://www.securityfocus.com/bid/16252
http://www.vupen.com/english/advisories/2006/0196
https://exchange.xforce.ibmcloud.com/vulnerabilities/24130
http://secunia.com/advisories/18457
http://secunia.com/advisories/18496
http://security.debian.org/pool/updates/main/a/albatross/albatross_1.20-2.diff.gz

Get alerted when CVE-2006-0044 or the next vulnerability affects your stack