Unrated severityNVD Advisory· Published Jun 1, 2006· Updated Jun 16, 2026
CVE-2006-2737
CVE-2006-2737
Description
utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary groups, including the administrative group, via a modified groupid parameter when creating a user via the addDB action.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:nukedit:nukedit:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:nukedit:nukedit:*:*:*:*:*:*:*:*range: <=4.9.6
- cpe:2.3:a:nukedit:nukedit:4.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:nukedit:nukedit:4.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:nukedit:nukedit:4.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:nukedit:nukedit:4.9.3:*:*:*:*:*:*:*
- (no CPE)range: <=4.9.6
Patches
Vulnerability mechanics
References
8- www.kapda.ir/advisory-337.htmlnvdExploitVendor Advisory
- www.kapda.ir/attach-1661-nukedit.txtnvdExploit
- secunia.com/advisories/20348nvdVendor Advisory
- securityreason.com/securityalert/1013nvd
- www.securityfocus.com/archive/1/435311/100/0/threadednvd
- www.securityfocus.com/bid/18157nvd
- www.vupen.com/english/advisories/2006/2052nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/26951nvd
News mentions
0No linked articles in our index yet.