# CVEs published 2006-06-01

40 CVEs were published on June 1, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2753](https://cve.now/CVE-2006-2753.md): SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL (no CVSS)
- [CVE-2006-2754](https://cve.now/CVE-2006-2754.md): Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname (no CVSS)
- [CVE-2006-2439](https://cve.now/CVE-2006-2439.md): Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP archive containing (no CVSS)
- [CVE-2006-2703](https://cve.now/CVE-2006-2703.md): The RedCarpet command-line client (rug) does not verify SSL certificates from a server, which allows remote attackers to read network traffi (no CVSS)
- [CVE-2006-2725](https://cve.now/CVE-2006-2725.md): SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL commands via the id par (no CVSS)
- [CVE-2006-2726](https://cve.now/CVE-2006-2726.md): PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files via the config\[fsBase\] (no CVSS)
- [CVE-2006-2727](https://cve.now/CVE-2006-2727.md): home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modi (no CVSS)
- [CVE-2006-2728](https://cve.now/CVE-2006-2728.md): Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2006-2729](https://cve.now/CVE-2006-2729.md): Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2006-2730](https://cve.now/CVE-2006-2730.md): PHP remote file inclusion vulnerability in admin/lib\_action\_step.php in Hot Open Tickets (HOT) 11012004\_ver2f, when register\_globals is enab (no CVSS)
- [CVE-2006-2731](https://cve.now/CVE-2006-2731.md): Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2006-2732](https://cve.now/CVE-2006-2732.md): SQL injection vulnerability in Your\_Account.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2006-2733](https://cve.now/CVE-2006-2733.md): membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via auto (no CVSS)
- [CVE-2006-2734](https://cve.now/CVE-2006-2734.md): enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by setting the guvenlik par (no CVSS)
- [CVE-2006-2735](https://cve.now/CVE-2006-2735.md): PHP remote file inclusion vulnerability in language/lang\_english/lang\_activity.php in Activity MOD Plus (Amod) 1.1.0, as used with phpBB whe (no CVSS)
- [CVE-2006-2736](https://cve.now/CVE-2006-2736.md): PHP remote file inclusion vulnerability in blend\_data/blend\_common.php in Blend Portal 1.2.0, as used with phpBB when register\_globals is en (no CVSS)
- [CVE-2006-2737](https://cve.now/CVE-2006-2737.md): utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary groups, including the a (no CVSS)
- [CVE-2006-2738](https://cve.now/CVE-2006-2738.md): The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfi (no CVSS)
- [CVE-2006-2739](https://cve.now/CVE-2006-2739.md): PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when register\_globals is enabled, allows remote attackers (no CVSS)
- [CVE-2006-2740](https://cve.now/CVE-2006-2740.md): Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) q para (no CVSS)
- [CVE-2006-2741](https://cve.now/CVE-2006-2741.md): Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web script or HTML via the q p (no CVSS)
- [CVE-2006-2742](https://cve.now/CVE-2006-2742.md): SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) cou (no CVSS)
- [CVE-2006-2743](https://cve.now/CVE-2006-2743.md): Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod\_mime, does not properly handle files with multiple extensions, which al (no CVSS)
- [CVE-2006-2744](https://cve.now/CVE-2006-2744.md): PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to exec (no CVSS)
- [CVE-2006-2745](https://cve.now/CVE-2006-2745.md): Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register\_globals is enabled, allow remo (no CVSS)
- [CVE-2006-2746](https://cve.now/CVE-2006-2746.md): Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2006-2747](https://cve.now/CVE-2006-2747.md): Directory traversal vulnerability in index.php in PhpMyDesktop|arcade 1.0 FINAL allows remote attackers to read arbitrary files or execute P (no CVSS)
- [CVE-2006-2748](https://cve.now/CVE-2006-2748.md): SQL injection vulnerability in the do\_mysql\_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remo (no CVSS)
- [CVE-2006-2749](https://cve.now/CVE-2006-2749.md): SQL injection vulnerability in search.php in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject ar (no CVSS)
- [CVE-2006-2750](https://cve.now/CVE-2006-2750.md): Cross-site scripting (XSS) vulnerability in the do\_mysql\_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0. (no CVSS)
- [CVE-2006-2751](https://cve.now/CVE-2006-2751.md): Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arb (no CVSS)
- [CVE-2006-2752](https://cve.now/CVE-2006-2752.md): The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable permissions, which allows (no CVSS)
- [CVE-2006-2718](https://cve.now/CVE-2006-2718.md): JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .r (no CVSS)
- [CVE-2006-2719](https://cve.now/CVE-2006-2719.md): JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HR\_Staff table in Microsoft SQL Server, and sends (no CVSS)
- [CVE-2006-2720](https://cve.now/CVE-2006-2720.md): SQL injection vulnerability in news.php in VARIOMAT allows remote attackers to execute arbitrary SQL commands via the subcat parameter. (no CVSS)
- [CVE-2006-2721](https://cve.now/CVE-2006-2721.md): Cross-site scripting (XSS) vulnerability in news.php in VARIOMAT allows remote attackers to inject arbitrary HTML or web script via the subc (no CVSS)
- [CVE-2006-2722](https://cve.now/CVE-2006-2722.md): SQL injection vulnerability in view\_album.php in SelectaPix 1.4 allows remote attackers to execute arbitrary SQL commands via unknown vector (no CVSS)
- [CVE-2006-2723](https://cve.now/CVE-2006-2723.md): Unspecified versions of Mozilla Firefox allow remote attackers to cause a denial of service (crash) via a web page that contains a large num (no CVSS)
- [CVE-2006-2724](https://cve.now/CVE-2006-2724.md): Cross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary HTML or web script t (no CVSS)
- [CVE-2005-0136](https://cve.now/CVE-2005-0136.md): The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of se (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.