# CVEs published 2006-06-06

54 CVEs were published on June 6, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2447](https://cve.now/CVE-2006-2447.md): SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands… (no CVSS)
- [CVE-2005-2460](https://cve.now/CVE-2005-2460.md): Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2005-2461](https://cve.now/CVE-2005-2461.md): Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2005-2462](https://cve.now/CVE-2005-2462.md): Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users and possibly… (no CVSS)
- [CVE-2005-2463](https://cve.now/CVE-2005-2463.md): Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include… (no CVSS)
- [CVE-2005-2464](https://cve.now/CVE-2005-2464.md): login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the… (no CVSS)
- [CVE-2005-2465](https://cve.now/CVE-2005-2465.md): Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2005-2466](https://cve.now/CVE-2005-2466.md): Multiple SQL injection vulnerabilities in the auth\_user function in admin.php in OpenBook 1.2.2 allow remote attackers to execute… (no CVSS)
- [CVE-2005-2467](https://cve.now/CVE-2005-2467.md): Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2005-2468](https://cve.now/CVE-2005-2468.md): Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-2834](https://cve.now/CVE-2006-2834.md): PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-2835](https://cve.now/CVE-2006-2835.md): SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in… (no CVSS)
- [CVE-2006-2836](https://cve.now/CVE-2006-2836.md): SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-2837](https://cve.now/CVE-2006-2837.md): Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2006-2838](https://cve.now/CVE-2006-2838.md): Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50… (no CVSS)
- [CVE-2006-2839](https://cve.now/CVE-2006-2839.md): Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and… (no CVSS)
- [CVE-2006-2840](https://cve.now/CVE-2006-2840.md): Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to… (no CVSS)
- [CVE-2006-2841](https://cve.now/CVE-2006-2841.md): Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2006-2842](https://cve.now/CVE-2006-2842.md): PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register\_globals is enabled and… (no CVSS)
- [CVE-2006-2843](https://cve.now/CVE-2006-2843.md): PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the (1)… (no CVSS)
- [CVE-2006-2844](https://cve.now/CVE-2006-2844.md): Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the… (no CVSS)
- [CVE-2006-2845](https://cve.now/CVE-2006-2845.md): PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the… (no CVSS)
- [CVE-2006-2846](https://cve.now/CVE-2006-2846.md): Cross-site scripting (XSS) vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2006-2847](https://cve.now/CVE-2006-2847.md): SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands via the linkID… (no CVSS)
- [CVE-2006-2848](https://cve.now/CVE-2006-2848.md): links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct request with a modified… (no CVSS)
- [CVE-2006-2849](https://cve.now/CVE-2006-2849.md): PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote attackers to execute… (no CVSS)
- [CVE-2006-2850](https://cve.now/CVE-2006-2850.md): Cross-site scripting (XSS) vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject… (no CVSS)
- [CVE-2006-2851](https://cve.now/CVE-2006-2851.md): Cross-site scripting (XSS) vulnerability in index.php in dotProject 2.0.2 and earlier allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-2852](https://cve.now/CVE-2006-2852.md): PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register\_globals is enabled, allows remote attackers to… (no CVSS)
- [CVE-2006-2853](https://cve.now/CVE-2006-2853.md): SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2006-2854](https://cve.now/CVE-2006-2854.md): SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL commands via the offset… (no CVSS)
- [CVE-2006-2855](https://cve.now/CVE-2006-2855.md): SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter. (no CVSS)
- [CVE-2006-2856](https://cve.now/CVE-2006-2856.md): ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which… (no CVSS)
- [CVE-2006-2857](https://cve.now/CVE-2006-2857.md): SQL injection vulnerability in index.php in LifeType 1.0.4 allows remote attackers to execute arbitrary SQL commands via the articleId… (no CVSS)
- [CVE-2006-2858](https://cve.now/CVE-2006-2858.md): SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2006-2859](https://cve.now/CVE-2006-2859.md): PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in… (no CVSS)
- [CVE-2006-2860](https://cve.now/CVE-2006-2860.md): PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the… (no CVSS)
- [CVE-2006-2861](https://cve.now/CVE-2006-2861.md): SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2006-2862](https://cve.now/CVE-2006-2862.md): SQL injection vulnerability in viewimage.php in Particle Gallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-2863](https://cve.now/CVE-2006-2863.md): PHP remote file inclusion vulnerability in class.cs\_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2006-2864](https://cve.now/CVE-2006-2864.md): Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitrary PHP code via a… (no CVSS)
- [CVE-2006-2865](https://cve.now/CVE-2006-2865.md): PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the… (no CVSS)
- [CVE-2006-2866](https://cve.now/CVE-2006-2866.md): PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-2867](https://cve.now/CVE-2006-2867.md): SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2006-2868](https://cve.now/CVE-2006-2868.md): Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in… (no CVSS)
- [CVE-2006-2869](https://cve.now/CVE-2006-2869.md): Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors. (no CVSS)
- [CVE-2006-2870](https://cve.now/CVE-2006-2870.md): Cross-site scripting (XSS) vulnerability in forum\_search.asp in Intelligent Solutions Inc. (no CVSS)
- [CVE-2006-2871](https://cve.now/CVE-2006-2871.md): PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2006-2872](https://cve.now/CVE-2006-2872.md): PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in… (no CVSS)
- [CVE-2006-2873](https://cve.now/CVE-2006-2873.md): Cross-site scripting (XSS) vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2006-2874](https://cve.now/CVE-2006-2874.md): Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a "Security Leak to lock… (no CVSS)
- [CVE-2006-2831](https://cve.now/CVE-2006-2831.md): Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are… (no CVSS)
- [CVE-2006-2832](https://cve.now/CVE-2006-2832.md): Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows… (no CVSS)
- [CVE-2006-2833](https://cve.now/CVE-2006-2833.md): Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to inject arbitrary web… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-06-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.