# CVEs published 2006-06-06

54 CVEs were published on June 6, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2447](https://cve.now/CVE-2006-2447.md): SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands vi (no CVSS)
- [CVE-2005-2460](https://cve.now/CVE-2005-2460.md): Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-2461](https://cve.now/CVE-2005-2461.md): Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2005-2462](https://cve.now/CVE-2005-2462.md): Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users and possibly remote (no CVSS)
- [CVE-2005-2463](https://cve.now/CVE-2005-2463.md): Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include sc (no CVSS)
- [CVE-2005-2464](https://cve.now/CVE-2005-2464.md): login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the target (no CVSS)
- [CVE-2005-2465](https://cve.now/CVE-2005-2465.md): Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-2466](https://cve.now/CVE-2005-2466.md): Multiple SQL injection vulnerabilities in the auth\_user function in admin.php in OpenBook 1.2.2 allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2005-2467](https://cve.now/CVE-2005-2467.md): Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2005-2468](https://cve.now/CVE-2005-2468.md): Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the ( (no CVSS)
- [CVE-2006-2834](https://cve.now/CVE-2006-2834.md): PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PH (no CVSS)
- [CVE-2006-2835](https://cve.now/CVE-2006-2835.md): SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in ad (no CVSS)
- [CVE-2006-2836](https://cve.now/CVE-2006-2836.md): SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2006-2837](https://cve.now/CVE-2006-2837.md): Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via cert (no CVSS)
- [CVE-2006-2838](https://cve.now/CVE-2006-2838.md): Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 al (no CVSS)
- [CVE-2006-2839](https://cve.now/CVE-2006-2839.md): Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earl (no CVSS)
- [CVE-2006-2840](https://cve.now/CVE-2006-2840.md): Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to injec (no CVSS)
- [CVE-2006-2841](https://cve.now/CVE-2006-2841.md): Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2006-2842](https://cve.now/CVE-2006-2842.md): PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register\_globals is enabled and magic\_ (no CVSS)
- [CVE-2006-2843](https://cve.now/CVE-2006-2843.md): PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the (1) REX\[INCLU (no CVSS)
- [CVE-2006-2844](https://cve.now/CVE-2006-2844.md): Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REX\[I (no CVSS)
- [CVE-2006-2845](https://cve.now/CVE-2006-2845.md): PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REX\[I (no CVSS)
- [CVE-2006-2846](https://cve.now/CVE-2006-2846.md): Cross-site scripting (XSS) vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-2847](https://cve.now/CVE-2006-2847.md): SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands via the linkID paramet (no CVSS)
- [CVE-2006-2848](https://cve.now/CVE-2006-2848.md): links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct request with a modified tx (no CVSS)
- [CVE-2006-2849](https://cve.now/CVE-2006-2849.md): PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote attackers to execute arbi (no CVSS)
- [CVE-2006-2850](https://cve.now/CVE-2006-2850.md): Cross-site scripting (XSS) vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbit (no CVSS)
- [CVE-2006-2851](https://cve.now/CVE-2006-2851.md): Cross-site scripting (XSS) vulnerability in index.php in dotProject 2.0.2 and earlier allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-2852](https://cve.now/CVE-2006-2852.md): PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register\_globals is enabled, allows remote attackers to exe (no CVSS)
- [CVE-2006-2853](https://cve.now/CVE-2006-2853.md): SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-2854](https://cve.now/CVE-2006-2854.md): SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL commands via the offset para (no CVSS)
- [CVE-2006-2855](https://cve.now/CVE-2006-2855.md): SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter. (no CVSS)
- [CVE-2006-2856](https://cve.now/CVE-2006-2856.md): ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which allo (no CVSS)
- [CVE-2006-2857](https://cve.now/CVE-2006-2857.md): SQL injection vulnerability in index.php in LifeType 1.0.4 allows remote attackers to execute arbitrary SQL commands via the articleId param (no CVSS)
- [CVE-2006-2858](https://cve.now/CVE-2006-2858.md): SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-2859](https://cve.now/CVE-2006-2859.md): PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in th (no CVSS)
- [CVE-2006-2860](https://cve.now/CVE-2006-2860.md): PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the path (no CVSS)
- [CVE-2006-2861](https://cve.now/CVE-2006-2861.md): SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2006-2862](https://cve.now/CVE-2006-2862.md): SQL injection vulnerability in viewimage.php in Particle Gallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-2863](https://cve.now/CVE-2006-2863.md): PHP remote file inclusion vulnerability in class.cs\_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-2864](https://cve.now/CVE-2006-2864.md): Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2006-2865](https://cve.now/CVE-2006-2865.md): PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the pa (no CVSS)
- [CVE-2006-2866](https://cve.now/CVE-2006-2866.md): PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2006-2867](https://cve.now/CVE-2006-2867.md): SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2006-2868](https://cve.now/CVE-2006-2868.md): Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2006-2869](https://cve.now/CVE-2006-2869.md): Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors. (no CVSS)
- [CVE-2006-2870](https://cve.now/CVE-2006-2870.md): Cross-site scripting (XSS) vulnerability in forum\_search.asp in Intelligent Solutions Inc. (no CVSS)
- [CVE-2006-2871](https://cve.now/CVE-2006-2871.md): PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2006-2872](https://cve.now/CVE-2006-2872.md): PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2006-2873](https://cve.now/CVE-2006-2873.md): Cross-site scripting (XSS) vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-2874](https://cve.now/CVE-2006-2874.md): Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a "Security Leak to lock in (no CVSS)
- [CVE-2006-2831](https://cve.now/CVE-2006-2831.md): Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disab (no CVSS)
- [CVE-2006-2832](https://cve.now/CVE-2006-2832.md): Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows rem (no CVSS)
- [CVE-2006-2833](https://cve.now/CVE-2006-2833.md): Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to inject arbitrary web sc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.