# CVEs published 2006-04-10 22 CVEs were published on April 10, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-1676](https://cve.now/CVE-2006-1676.md): SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, and possibly other ver (no CVSS) - [CVE-2006-1677](https://cve.now/CVE-2006-1677.md): MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to obtain the full path of the server via (no CVSS) - [CVE-2006-1678](https://cve.now/CVE-2006-1678.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2006-1679](https://cve.now/CVE-2006-1679.md): Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2006-1680](https://cve.now/CVE-2006-1680.md): Jupiter CMS 1.1.5, when display\_errors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/on (no CVSS) - [CVE-2006-1681](https://cve.now/CVE-2006-1681.md): Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2006-1682](https://cve.now/CVE-2006-1682.md): Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary w (no CVSS) - [CVE-2006-1683](https://cve.now/CVE-2006-1683.md): SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass lo (no CVSS) - [CVE-2006-1684](https://cve.now/CVE-2006-1684.md): Unspecified vulnerability in ecotwo Shopsystem 1.0-192 and earlier allows remote attackers to include arbitrary local files via (1) the lang (no CVSS) - [CVE-2006-1685](https://cve.now/CVE-2006-1685.md): Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to exec (no CVSS) - [CVE-2006-1686](https://cve.now/CVE-2006-1686.md): Unspecified vulnerability in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to access unspecifi (no CVSS) - [CVE-2006-1687](https://cve.now/CVE-2006-1687.md): Cross-site scripting (XSS) vulnerability in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to inject arbitrary (no CVSS) - [CVE-2006-1688](https://cve.now/CVE-2006-1688.md): Multiple PHP remote file inclusion vulnerabilities in SQuery 4.5 and earlier, as used in products such as Autonomous LAN party (ALP), allow (no CVSS) - [CVE-2006-1689](https://cve.now/CVE-2006-1689.md): Unspecified vulnerability in su in HP HP-UX B.11.11, when using the LDAP netgroup feature, allows local users to gain unspecified access. (no CVSS) - [CVE-2006-1549](https://cve.now/CVE-2006-1549.md): PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. (no CVSS) - [CVE-2006-1522](https://cve.now/CVE-2006-1522.md): The sys\_add\_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to c (no CVSS) - [CVE-2006-1494](https://cve.now/CVE-2006-1494.md): Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open\_basedir restrictions allows remote atta (no CVSS) - [CVE-2006-1608](https://cve.now/CVE-2006-1608.md): The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument con (no CVSS) - [CVE-2006-1674](https://cve.now/CVE-2006-1674.md): Cross-site scripting (XSS) vulnerability in search.php in PHPWebGallery 1.4.1 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2006-1675](https://cve.now/CVE-2006-1675.md): Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2006-0053](https://cve.now/CVE-2006-0053.md): Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by writing a 2- or 4-ch (no CVSS) - [CVE-2006-0996](https://cve.now/CVE-2006-0996.md): Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script o (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-04-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.