Chain
CVE-2006-3017 family: incomplete fixes (2006–2008)
11 CVEs over 2 generations, 14 Jun 2006 to 11 Sep 2009.
Family tree
Left to right by publication date.Oldest first. Select a CVE to open it.- CVE-2006-301714 Jun 2006 First in the chain
- CVE-2006-446631 Aug 2006 incomplete fix for CVE-2006-3017
- CVE-2006-446731 Aug 2006 incomplete fix for CVE-2006-3017
- CVE-2006-45486 Sep 2006 incomplete fix for CVE-2006-3017
- CVE-2006-467711 Sep 2006 bypassed the fix for CVE-2006-3017
- CVE-2006-62895 Dec 2006 incomplete fix for CVE-2006-3017
- CVE-2007-023313 Jan 2007 incomplete fix for CVE-2006-3017
- CVE-2006-69664 Feb 2007 incomplete fix for CVE-2006-3017
- CVE-2007-53079 Oct 2007 incomplete fix for CVE-2006-3017
- CVE-2007-541612 Oct 2007 incomplete fix for CVE-2006-3017
- CVE-2008-721011 Sep 2009 incomplete fix for CVE-2006-3017
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low Link confidenceHow strong the evidence is that two CVEs are related. High: stated in the CVE text or linked in an advisory, or the same code was patched one release apart. Medium: the same code, or a version step plus a similar description. Low: similar description only.
CVEs in this family
Table view of the tree| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2006-3017 | 14 Jun 2006 | zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete… | First in chain | 18.2 |
| CVE-2006-4466 | 31 Aug 2006 | Joomla! before 1.0.11 does not properly unset variables when the input data includes a numeric parameter with a value… | CVE-2006-3017 · incomplete fix · High | 12.8 |
| CVE-2006-4467 | 31 Aug 2006 | Simple Machines Forum (SMF) 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the… | CVE-2006-3017 · incomplete fix · High | 15.8 |
| CVE-2006-4548 | 6 Sep 2006 | e107 0.75 and earlier does not properly unset variables when the input data includes a numeric parameter with a value… | CVE-2006-3017 · incomplete fix · High | 15.5 |
| CVE-2006-4677 | 11 Sep 2006 | PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers… | CVE-2006-3017 · bypassed the fix · High | 15.1 |
| CVE-2006-6289 | 5 Dec 2006 | Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a numeric… | CVE-2006-3017 · incomplete fix · High | 21.3 |
| CVE-2007-0233 | 13 Jan 2007 | wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a… | CVE-2006-3017 · incomplete fix · High | 24.2 |
| CVE-2006-6966 | 4 Feb 2007 | phpGraphy before 0.9.13a does not properly unset variables when the input data includes a numeric parameter with a… | CVE-2006-3017 · incomplete fix · High | 22.0 |
| CVE-2007-5307 | 9 Oct 2007 | ELSEIF CMS Beta 0.6 does not properly unset variables when the input data includes a numeric parameter with a value… | CVE-2006-3017 · incomplete fix · High | 21.8 |
| CVE-2007-5416 | 12 Oct 2007 | Drupal 5.2 and earlier does not properly unset variables when the input data includes a numeric parameter with a value… | CVE-2006-3017 · incomplete fix · High | 23.3 |
| CVE-2008-7210 | 11 Sep 2009 | directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via… | CVE-2006-3017 · incomplete fix · High | 18.3 |