# CVEs published 2006-06-24

20 CVEs were published on June 24, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3218](https://cve.now/CVE-2006-3218.md): SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2006-3219](https://cve.now/CVE-2006-3219.md): SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2006-3220](https://cve.now/CVE-2006-3220.md): SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-3221](https://cve.now/CVE-2006-3221.md): SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2006-3222](https://cve.now/CVE-2006-3222.md): The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning… (no CVSS)
- [CVE-2006-3203](https://cve.now/CVE-2006-3203.md): The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows… (no CVSS)
- [CVE-2006-3204](https://cve.now/CVE-2006-3204.md): Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows… (no CVSS)
- [CVE-2006-3205](https://cve.now/CVE-2006-3205.md): Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user\_env, pass\_env, power\_env, and id\_env… (no CVSS)
- [CVE-2006-3206](https://cve.now/CVE-2006-3206.md): register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "\[NR\]" sequence in… (no CVSS)
- [CVE-2006-3207](https://cve.now/CVE-2006-3207.md): Directory traversal vulnerability in newpost.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to overwrite… (no CVSS)
- [CVE-2006-3208](https://cve.now/CVE-2006-3208.md): Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administrators to… (no CVSS)
- [CVE-2006-3209](https://cve.now/CVE-2006-3209.md): The Task scheduler (at.exe) on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to… (no CVSS)
- [CVE-2006-3210](https://cve.now/CVE-2006-3210.md): Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register\_globals is enabled, allows remote attackers to conduct PHP… (no CVSS)
- [CVE-2006-3211](https://cve.now/CVE-2006-3211.md): Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via… (no CVSS)
- [CVE-2006-3212](https://cve.now/CVE-2006-3212.md): Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject web script or HTML… (no CVSS)
- [CVE-2006-3213](https://cve.now/CVE-2006-3213.md): SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an… (no CVSS)
- [CVE-2006-3214](https://cve.now/CVE-2006-3214.md): Unspecified vulnerability in Hitachi Groupmax Address Server 7 and earlier, and Groupmax Mail Server 7 and earlier allows remote attackers… (no CVSS)
- [CVE-2006-3215](https://cve.now/CVE-2006-3215.md): Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text… (no CVSS)
- [CVE-2006-3216](https://cve.now/CVE-2006-3216.md): Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2006-3217](https://cve.now/CVE-2006-3217.md): JaguarEditControl (JEdit) ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information, such as the… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-06-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.