# CVEs published 2006-10-25

26 CVEs were published on October 25, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-5382](https://cve.now/CVE-2006-5382.md): 3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community… (no CVSS)
- [CVE-2006-5501](https://cve.now/CVE-2006-5501.md): Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition… (no CVSS)
- [CVE-2006-5502](https://cve.now/CVE-2006-5502.md): Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security… (no CVSS)
- [CVE-2006-5503](https://cve.now/CVE-2006-5503.md): Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2006-5504](https://cve.now/CVE-2006-5504.md): Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-5505](https://cve.now/CVE-2006-5505.md): Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to execute arbitrary PHP code via the lang parameter to… (no CVSS)
- [CVE-2006-5506](https://cve.now/CVE-2006-5506.md): Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path… (no CVSS)
- [CVE-2006-5507](https://cve.now/CVE-2006-5507.md): Multiple PHP remote file inclusion vulnerabilities in Der Dirigent (DeDi) 1.0.3 allow remote attackers to execute arbitrary PHP code via a… (no CVSS)
- [CVE-2006-5508](https://cve.now/CVE-2006-5508.md): Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-5509](https://cve.now/CVE-2006-5509.md): Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via… (no CVSS)
- [CVE-2006-5510](https://cve.now/CVE-2006-5510.md): Directory traversal vulnerability in explorer\_load\_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files… (no CVSS)
- [CVE-2006-5511](https://cve.now/CVE-2006-5511.md): Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register\_globals is enabled, allows remote… (no CVSS)
- [CVE-2006-5512](https://cve.now/CVE-2006-5512.md): Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2006-5488](https://cve.now/CVE-2006-5488.md): SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to… (no CVSS)
- [CVE-2006-5489](https://cve.now/CVE-2006-5489.md): Research in Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting… (no CVSS)
- [CVE-2006-5490](https://cve.now/CVE-2006-5490.md): Multiple SQL injection vulnerabilities in Segue Content Management System (CMS) before 1.5.8 allow remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-5491](https://cve.now/CVE-2006-5491.md): Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2006-5492](https://cve.now/CVE-2006-5492.md): Unspecified vulnerability in Maerys Archive (Maarch) before 2.0.1 allows remote authenticated users to obtain sensitive information… (no CVSS)
- [CVE-2006-5493](https://cve.now/CVE-2006-5493.md): PHP remote file inclusion vulnerability in template/purpletech/base\_include.php in DigitalHive 2.0 RC2 allows remote attackers to execute… (no CVSS)
- [CVE-2006-5494](https://cve.now/CVE-2006-5494.md): Multiple PHP remote file inclusion vulnerabilities in modules/My\_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke… (no CVSS)
- [CVE-2006-5495](https://cve.now/CVE-2006-5495.md): Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2006-5496](https://cve.now/CVE-2006-5496.md): Multiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-5497](https://cve.now/CVE-2006-5497.md): PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when register\_globals is… (no CVSS)
- [CVE-2006-5498](https://cve.now/CVE-2006-5498.md): Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to… (no CVSS)
- [CVE-2006-5499](https://cve.now/CVE-2006-5499.md): Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-5500](https://cve.now/CVE-2006-5500.md): Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlier, when… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-10-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.