# CVEs published 2006-04-17

4 CVEs were published on April 17, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1796](https://cve.now/CVE-2006-1796.md): Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly (no CVSS)
- [CVE-2006-1793](https://cve.now/CVE-2006-1793.md): Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPath\[path\] parameter t (no CVSS)
- [CVE-2006-1794](https://cve.now/CVE-2006-1794.md): SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-1795](https://cve.now/CVE-2006-1795.md): Cross-site scripting (XSS) vulnerability in tablepublisher.cgi in UPDI Network Enterprise @1 Table Publisher 2006-03-23 allows remote attack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-04-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.