# CVEs published 2006-09-01

12 CVEs were published on September 1, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4522](https://cve.now/CVE-2006-4522.md): Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via… (no CVSS)
- [CVE-2006-4523](https://cve.now/CVE-2006-4523.md): The web-based management interface in 2Wire, Inc. (no CVSS)
- [CVE-2006-4524](https://cve.now/CVE-2006-4524.md): Multiple SQL injection vulnerabilities in login\_verif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-4525](https://cve.now/CVE-2006-4525.md): Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register\_globals is enabled, allows remote attackers to… (no CVSS)
- [CVE-2006-4526](https://cve.now/CVE-2006-4526.md): SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register\_globals is enabled, allows… (no CVSS)
- [CVE-2006-4527](https://cve.now/CVE-2006-4527.md): includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magic\_quotes\_gpc is disabled, uses an insufficiently restrictive… (no CVSS)
- [CVE-2006-4528](https://cve.now/CVE-2006-4528.md): Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2006-4529](https://cve.now/CVE-2006-4529.md): SQL injection vulnerability in recherchemembre.php in membrepass 1.5. (no CVSS)
- [CVE-2006-4530](https://cve.now/CVE-2006-4530.md): Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2006-4531](https://cve.now/CVE-2006-4531.md): PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2006-4532](https://cve.now/CVE-2006-4532.md): PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and earlier allows remote… (no CVSS)
- [CVE-2006-4533](https://cve.now/CVE-2006-4533.md): Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-09-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.