Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-3695 Details

Description

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://secunia.com/advisories/20958	CVE	Vendor Advisory
http://secunia.com/advisories/21534	CVE	Vendor Advisory
http://securitytracker.com/id?1016457	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/27706	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/27708	CVE
http://trac.edgewall.org/wiki/ChangeLog	CVE
http://www.debian.org/security/2006/dsa-1152	CVE
http://www.securityfocus.com/bid/18323	CVE
http://www.vupen.com/english/advisories/2006/2729	CVE	Vendor Advisory
http://secunia.com/advisories/20958	[email protected]	Vendor Advisory
http://secunia.com/advisories/21534	[email protected]	Vendor Advisory
http://securitytracker.com/id?1016457	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/27706	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/27708	[email protected]
http://trac.edgewall.org/wiki/ChangeLog	[email protected]
http://www.debian.org/security/2006/dsa-1152	[email protected]
http://www.securityfocus.com/bid/18323	[email protected]
http://www.vupen.com/english/advisories/2006/2729	[email protected]	Vendor Advisory

see all 18 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
edgewall software trac	<= 0.9.5
CPE cpe:2.3:a:edgewall_software:trac:::::::: Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
Jul 21, 2006	Initial Analysis	[email protected]