# CVEs published 2006-06-08

6 CVEs were published on June 8, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2193](https://cve.now/CVE-2006-2193.md): Buffer overflow in the t2p\_write\_pdf\_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (no CVSS)
- [CVE-2006-2902](https://cve.now/CVE-2006-2902.md): Directory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access arbitrary files via ".." sequences in an HT (no CVSS)
- [CVE-2006-2903](https://cve.now/CVE-2006-2903.md): Cross-site scripting (XSS) vulnerability in admin.php in Particle Links 1.2.2 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-2904](https://cve.now/CVE-2006-2904.md): SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL commands via the topic para (no CVSS)
- [CVE-2006-2905](https://cve.now/CVE-2006-2905.md): Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to (1) page\_footer.php and (2) page\_header. (no CVSS)
- [CVE-2006-2906](https://cve.now/CVE-2006-2906.md): The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.