# CVEs published 2006-06-12

39 CVEs were published on June 12, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2981](https://cve.now/CVE-2006-2981.md): SQL injection vulnerability in vs\_search.php in Arantius Vice Stats before 1.0.1 allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2006-2972](https://cve.now/CVE-2006-2972.md): SQL injection vulnerability in vs\_resource.php in Arantius Vice Stats 0.5b and 1.0 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-2973](https://cve.now/CVE-2006-2973.md): Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2006-2974](https://cve.now/CVE-2006-2974.md): Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbi (no CVSS)
- [CVE-2006-2975](https://cve.now/CVE-2006-2975.md): Multiple cross-site scripting (XSS) vulnerabilities in pblguestbook.php in PBL Guestbook 1.31 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-2976](https://cve.now/CVE-2006-2976.md): Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly rel (no CVSS)
- [CVE-2006-2977](https://cve.now/CVE-2006-2977.md): SQL injection vulnerability in big.php in Mafia Moblog 0.6M1 and earlier allows remote attackers to execute arbitrary SQL commands via the i (no CVSS)
- [CVE-2006-2978](https://cve.now/CVE-2006-2978.md): Mafia Moblog 0.6M1 and earlier allows remote attackers to obtain the installation path in an error message via a direct request to (1) big.p (no CVSS)
- [CVE-2006-2979](https://cve.now/CVE-2006-2979.md): Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, an (no CVSS)
- [CVE-2006-2980](https://cve.now/CVE-2006-2980.md): SQL injection vulnerability in block\_forum\_topic\_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standar (no CVSS)
- [CVE-2006-2943](https://cve.now/CVE-2006-2943.md): Unspecified vulnerability in CGI-RESCUE WebFORM 4.1 and earlier allows remote attackers to inject email headers, which facilitates sending s (no CVSS)
- [CVE-2006-2944](https://cve.now/CVE-2006-2944.md): Unspecified vulnerability in CGI-RESCUE FORM2MAIL 1.21 and earlier allows remote attackers to inject email headers, which facilitates sendin (no CVSS)
- [CVE-2006-2945](https://cve.now/CVE-2006-2945.md): Unspecified vulnerability in the user profile change functionality in DokuWiki, when Access Control Lists are enabled, allows remote authent (no CVSS)
- [CVE-2006-2946](https://cve.now/CVE-2006-2946.md): Dmx Forum 2.1a stores \_includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database (no CVSS)
- [CVE-2006-2947](https://cve.now/CVE-2006-2947.md): Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified mem (no CVSS)
- [CVE-2006-2948](https://cve.now/CVE-2006-2948.md): A-CART 2.0 stores the acart2\_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtai (no CVSS)
- [CVE-2006-2949](https://cve.now/CVE-2006-2949.md): Cross-site scripting (XSS) vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-2950](https://cve.now/CVE-2006-2950.md): Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) header (no CVSS)
- [CVE-2006-2951](https://cve.now/CVE-2006-2951.md): Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.10 and earlier allow remote attackers to inject ar (no CVSS)
- [CVE-2006-2952](https://cve.now/CVE-2006-2952.md): Directory traversal vulnerability in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to read arbitrary files via a (no CVSS)
- [CVE-2006-2953](https://cve.now/CVE-2006-2953.md): Cross-site scripting (XSS) vulnerability in default.asp in OfficeFlow 2.6 and earlier allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-2954](https://cve.now/CVE-2006-2954.md): SQL injection vulnerability in files.asp in OfficeFlow 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the Pro (no CVSS)
- [CVE-2006-2955](https://cve.now/CVE-2006-2955.md): Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-2956](https://cve.now/CVE-2006-2956.md): Multiple cross-site scripting (XSS) vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-2957](https://cve.now/CVE-2006-2957.md): Cross-site scripting (XSS) vulnerability in i.List 1.5 beta and earlier allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2006-2958](https://cve.now/CVE-2006-2958.md): Directory traversal vulnerability in FilZip 3.05 allows remote attackers to write arbitrary files via a .. (no CVSS)
- [CVE-2006-2959](https://cve.now/CVE-2006-2959.md): SQL injection vulnerability in inc\_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2006-2960](https://cve.now/CVE-2006-2960.md): PHP remote file inclusion vulnerability in includes/joomla.php in Joomla! 1.0 allows remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2006-2961](https://cve.now/CVE-2006-2961.md): Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (application crash) and possi (no CVSS)
- [CVE-2006-2962](https://cve.now/CVE-2006-2962.md): PHP remote file inclusion vulnerability in sql\_fcnsOLD.php in Emergenices Personnel Information System (Empris) 20020923 and earlier allows (no CVSS)
- [CVE-2006-2963](https://cve.now/CVE-2006-2963.md): Cross-site scripting (XSS) vulnerability in Suchergebnisse.asp in Cabacos Web CMS 3.8.498 and earlier allows remote attackers to inject arbi (no CVSS)
- [CVE-2006-2964](https://cve.now/CVE-2006-2964.md): Multiple PHP remote file inclusion vulnerabilities in Xtreme Scripts Download Manager (aka Xtreme Downloads) 1.0 allow remote attackers to e (no CVSS)
- [CVE-2006-2965](https://cve.now/CVE-2006-2965.md): Multiple cross-site scripting (XSS) vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-2966](https://cve.now/CVE-2006-2966.md): Cross-site scripting (XSS) vulnerability in Particle Soft Particle Wiki 1.0.2 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-2967](https://cve.now/CVE-2006-2967.md): Syworks SafeNET allows local users to bypass restrictions on network resource consumption by editing the policy.dat file. (no CVSS)
- [CVE-2006-2968](https://cve.now/CVE-2006-2968.md): Cross-site scripting (XSS) vulnerability in search.php in PHP Labware LabWiki 1.0 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-2969](https://cve.now/CVE-2006-2969.md): Cross-site scripting (XSS) vulnerability in L0j1k tinyMuw 0.1.0 allow remote attackers to inject arbitrary web script or HTML via a javascri (no CVSS)
- [CVE-2006-2970](https://cve.now/CVE-2006-2970.md): videoPage.php in L0j1k tinyMuw 0.1.0 allows remote attackers to obtain sensitive information via a certain id parameter, probably with an in (no CVSS)
- [CVE-2006-2971](https://cve.now/CVE-2006-2971.md): Integer overflow in the recv\_packet function in 0verkill 0.16 allows remote attackers to cause a denial of service (daemon crash) via a UDP (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.