# CVEs published 2006-07-20 9 CVEs were published on July 20, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-3748](https://cve.now/CVE-2006-3748.md): PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and possibly other… (no CVSS) - [CVE-2006-3749](https://cve.now/CVE-2006-3749.md): PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component (com\_sitemap) 2.0.0 for Mambo 4.5.1 CMS, when… (no CVSS) - [CVE-2006-3750](https://cve.now/CVE-2006-3750.md): PHP remote file inclusion vulnerability in server.php in the Hashcash Component (com\_hashcash) 1.2.1 for Joomla! allows remote attackers… (no CVSS) - [CVE-2006-3751](https://cve.now/CVE-2006-3751.md): PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component (com\_htmlarea3\_xtd-c) for… (no CVSS) - [CVE-2006-3752](https://cve.now/CVE-2006-3752.md): Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary… (no CVSS) - [CVE-2006-3753](https://cve.now/CVE-2006-3753.md): setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a… (no CVSS) - [CVE-2006-3754](https://cve.now/CVE-2006-3754.md): PHP remote file inclusion vulnerability in Include/editor/rich\_files/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote… (no CVSS) - [CVE-2006-3755](https://cve.now/CVE-2006-3755.md): PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to… (no CVSS) - [CVE-2006-3756](https://cve.now/CVE-2006-3756.md): Cross-site scripting (XSS) vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-07-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.