# CVEs published 2006-09-08 23 CVEs were published on September 8, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-2482](https://cve.now/CVE-2006-2482.md): Heap-based buffer overflow in the TZipTV component in (1) ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, (2) PentaZip… (no CVSS) - [CVE-2006-4379](https://cve.now/CVE-2006-4379.md): Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and… (no CVSS) - [CVE-2006-4641](https://cve.now/CVE-2006-4641.md): SQL injection vulnerability in kategori.asp in Muratsoft Haber Portal 3.6 allows remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2006-4642](https://cve.now/CVE-2006-4642.md): AuditWizard 6.3.2, when using "Remote Audit," logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users… (no CVSS) - [CVE-2006-4643](https://cve.now/CVE-2006-4643.md): SQL injection vulnerability in consult/joueurs.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2006-4644](https://cve.now/CVE-2006-4644.md): PHP remote file inclusion vulnerability in modules/home.module.php in phpFullAnnu 5.1 and earlier allows remote attackers to execute… (no CVSS) - [CVE-2006-4645](https://cve.now/CVE-2006-4645.md): PHP remote file inclusion vulnerability in akarru.gui/main\_content.php in Akarru Social BookMarking Engine 0.4.3.34 and earlier, and… (no CVSS) - [CVE-2006-4646](https://cve.now/CVE-2006-4646.md): Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Pathauto module before pathauto\_node.inc 1.17.2.1 and the Drupal 4.6 Pathauto… (no CVSS) - [CVE-2006-4647](https://cve.now/CVE-2006-4647.md): PHP remote file inclusion vulnerability in news.php in Sponge News 2.2 and earlier allows remote attackers to execute arbitrary PHP code… (no CVSS) - [CVE-2006-4648](https://cve.now/CVE-2006-4648.md): PHP remote file inclusion vulnerability in bp\_ncom.php in BinGo News (BP News) 3.01 and earlier allows remote attackers to execute… (no CVSS) - [CVE-2006-4649](https://cve.now/CVE-2006-4649.md): PHP remote file inclusion vulnerability in bp\_news.php in BinGo News (BP News) 3.01 and earlier allows remote attackers to execute… (no CVSS) - [CVE-2006-4628](https://cve.now/CVE-2006-4628.md): Cross-site scripting (XSS) vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS) - [CVE-2006-4629](https://cve.now/CVE-2006-4629.md): PHP remote file inclusion vulnerability in affichage/commentaires.php in C-News.fr C-News 1.0.1 and earlier allows remote attackers to… (no CVSS) - [CVE-2006-4630](https://cve.now/CVE-2006-4630.md): PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when register\_globals is enabled, allows… (no CVSS) - [CVE-2006-4631](https://cve.now/CVE-2006-4631.md): Direct static code injection vulnerability in admin/save\_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to… (no CVSS) - [CVE-2006-4632](https://cve.now/CVE-2006-4632.md): Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2006-4633](https://cve.now/CVE-2006-4633.md): index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page\[\]… (no CVSS) - [CVE-2006-4634](https://cve.now/CVE-2006-4634.md): Cross-site scripting (XSS) vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the… (no CVSS) - [CVE-2006-4635](https://cve.now/CVE-2006-4635.md): Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges… (no CVSS) - [CVE-2006-4636](https://cve.now/CVE-2006-4636.md): Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local… (no CVSS) - [CVE-2006-4637](https://cve.now/CVE-2006-4637.md): Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in… (no CVSS) - [CVE-2006-4638](https://cve.now/CVE-2006-4638.md): PHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows remote attackers to execute arbitrary PHP… (no CVSS) - [CVE-2006-4639](https://cve.now/CVE-2006-4639.md): Multiple PHP remote file inclusion vulnerabilities in C-News.fr C-News 1.0.1 and earlier, when register\_globals is enabled, allow remote… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-09-08 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.