Vulnerability record · CVE-2006-1641 · published 6 April 2006

CVE-2006-1641: Czaries network czarnews vulnerability

CCzaries Network · Czarnews

Multiple SQL injection vulnerabilities in CzarNews 1.14 allow remote attackers to execute arbitrary SQL commands via the (1) usern or (2) passw parameters to (a) cn_auth.php, (3) s parameter to (b) news.php, or (4) a parameter to (c) dpost.php.

5.1 CVSS 2.0 Medium EPSS 2.4% · top 16.9%

5.1CVSS 2.0 base score

2.4%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

20References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

CCzarnews Czaries Network

References

Link	Tags
http://evuln.com/vulns/118/summary.html
http://secunia.com/advisories/19541	Vendor Advisory
http://securitytracker.com/id?1015957
http://www.osvdb.org/24382
http://www.osvdb.org/24383
http://www.osvdb.org/24384
http://www.securityfocus.com/archive/1/431132/100/0/threaded
http://www.securityfocus.com/bid/17380
http://www.vupen.com/english/advisories/2006/1237
https://exchange.xforce.ibmcloud.com/vulnerabilities/25624
http://evuln.com/vulns/118/summary.html
http://secunia.com/advisories/19541	Vendor Advisory
http://securitytracker.com/id?1015957
http://www.osvdb.org/24382
http://www.osvdb.org/24383
http://www.osvdb.org/24384
http://www.securityfocus.com/archive/1/431132/100/0/threaded
http://www.securityfocus.com/bid/17380
http://www.vupen.com/english/advisories/2006/1237
https://exchange.xforce.ibmcloud.com/vulnerabilities/25624

Track CVE-2006-1641 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2005-0859Czaries network czarnews vulnerabilityPHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to (1) headli…EPSS 11%2 May 2005 5.1CVE-2006-3685Czaries network czarnews vulnerabilityPHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP code via a URL in the tpath pa…EPSS 2.8%21 Jul 2006 2.6CVE-2006-1640Czaries network czarnews vulnerabilityCross-site scripting (XSS) vulnerability in news.php in CzarNews 1.14 allows remote attackers to inject arbitrary web script or HTML via the email pa…EPSS 1.7%6 Apr 2006

Source: NIST National Vulnerability Database (record CVE-2006-1641), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.