# CVEs published 2006-06-03

15 CVEs were published on June 3, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2799](https://cve.now/CVE-2006-2799.md): Cross-site scripting (XSS) vulnerability in content\_footer.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or (no CVSS)
- [CVE-2006-2800](https://cve.now/CVE-2006-2800.md): Multiple cross-site scripting (XSS) vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-2801](https://cve.now/CVE-2006-2801.md): Multiple SQL injection vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2006-2802](https://cve.now/CVE-2006-2802.md): Buffer overflow in the HTTP Plugin (xineplug\_inp\_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (applicati (no CVSS)
- [CVE-2006-2803](https://cve.now/CVE-2006-2803.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2006-2804](https://cve.now/CVE-2006-2804.md): Cross-site scripting (XSS) vulnerability in index.cfm in Goss Intelligent Content Management (iCM) 7.0 and earlier allows remote attackers t (no CVSS)
- [CVE-2006-2805](https://cve.now/CVE-2006-2805.md): SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL commands via the featureid parameter. (no CVSS)
- [CVE-2006-2791](https://cve.now/CVE-2006-2791.md): Directory traversal vulnerability in index.php in iBoutique.MALL and possibly iBoutique allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2006-2792](https://cve.now/CVE-2006-2792.md): SQL injection vulnerability in misc.php in Woltlab Burning Board (WBB) 2.3.4 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2006-2793](https://cve.now/CVE-2006-2793.md): SQL injection vulnerability in Anket.asp in ASPSitem 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the hid p (no CVSS)
- [CVE-2006-2794](https://cve.now/CVE-2006-2794.md): Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified id parameter. (no CVSS)
- [CVE-2006-2795](https://cve.now/CVE-2006-2795.md): Multiple cross-site scripting (XSS) vulnerabilities in XiTi Tracking Script 6 and 7 RC allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-2796](https://cve.now/CVE-2006-2796.md): Cross-site scripting (XSS) vulnerability in gallery.php in Captivate 1.0 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-2797](https://cve.now/CVE-2006-2797.md): Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) Ca (no CVSS)
- [CVE-2006-2798](https://cve.now/CVE-2006-2798.md): Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbitrary web script or H (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.