CVE-2006-6344

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-07 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in Neocrome Seditio 1.10 and earlier have unknown impact and attack vectors related to (1) plugins/ipsearch/ipsearch.admin.php, and (2) pfs/pfs.edit.inc.php, (3) users/users.register.inc.php in system/core. NOTE: the users.profile.inc.php vector is identified by CVE-2006-6177. NOTE: these issues might be related to SQL injection.

Affected products

Neocrome Seditio: through 1.10

References

http://secunia.com/advisories/23180
http://www.neocrome.net/page.php?id=2233
http://www.vupen.com/english/advisories/2006/4805
http://secunia.com/advisories/23180
http://www.neocrome.net/page.php?id=2233
http://www.vupen.com/english/advisories/2006/4805

Get alerted when CVE-2006-6344 or the next vulnerability affects your stack