# CVEs published 2006-10-30

6 CVEs were published on October 30, 2006: 1 critical, 0 high. Days are UTC.

- [CVE-2006-5607](https://cve.now/CVE-2006-5607.md): Directory traversal vulnerability in /cgi-bin/webcm in INCA IM-204 allows remote attackers to read arbitrary files via a "/./." (modified… (no CVSS)
- [CVE-2006-5608](https://cve.now/CVE-2006-5608.md): SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-5609](https://cve.now/CVE-2006-5609.md): Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via "\\.\\./"… (no CVSS)
- [CVE-2006-5603](https://cve.now/CVE-2006-5603.md): SQL injection vulnerability in pop\_mail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the… (CVSS 9.8)
- [CVE-2006-5604](https://cve.now/CVE-2006-5604.md): Directory traversal vulnerability in phpcards.header.php in phpCards 1.3 allows remote attackers to include and execute arbitrary local… (no CVSS)
- [CVE-2006-5605](https://cve.now/CVE-2006-5605.md): Multiple cross-site scripting (XSS) vulnerabilities in phpcards.footer.php in phpCards 1.3 allow remote attackers to inject arbitrary web… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-10-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.