# CVEs published 2006-06-19

36 CVEs were published on June 19, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3087](https://cve.now/CVE-2006-3087.md): Multiple cross-site scripting (XSS) vulnerabilities in EZGallery 1.5 and earlier allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2006-3088](https://cve.now/CVE-2006-3088.md): Cross-site scripting (XSS) vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-3089](https://cve.now/CVE-2006-3089.md): Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFactures 1.0, and possibly 1.2 and earlier, allow remote attackers to inject arb (no CVSS)
- [CVE-2006-3090](https://cve.now/CVE-2006-3090.md): Multiple SQL injection vulnerabilities in PhpMyFactures 1.0, and possibly 1.2 and earlier, with magic\_quotes\_gpc disabled, allow remote atta (no CVSS)
- [CVE-2006-3091](https://cve.now/CVE-2006-3091.md): PhpMyFactures 1.0, and possibly 1.2 and earlier, allows remote attackers to obtain the installation path via a direct request to (1) /verif. (no CVSS)
- [CVE-2006-3092](https://cve.now/CVE-2006-3092.md): PhpMyFactures 1.2 and earlier allows remote attackers to bypass authentication and modify data via direct requests with modified parameters (no CVSS)
- [CVE-2006-3093](https://cve.now/CVE-2006-3093.md): Multiple unspecified vulnerabilities in Adobe Acrobat Reader (acroread) before 7.0.8 have unknown impact and unknown vectors. (no CVSS)
- [CVE-2006-3094](https://cve.now/CVE-2006-3094.md): Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with magic\_quotes\_gpc disabled, allow remote attackers (no CVSS)
- [CVE-2006-3095](https://cve.now/CVE-2006-3095.md): Multiple cross-site scripting (XSS) vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-3096](https://cve.now/CVE-2006-3096.md): Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2006-3086](https://cve.now/CVE-2006-3086.md): Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remot (no CVSS)
- [CVE-2006-3081](https://cve.now/CVE-2006-3081.md): mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (no CVSS)
- [CVE-2006-3082](https://cve.now/CVE-2006-3082.md): parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and p (no CVSS)
- [CVE-2006-3012](https://cve.now/CVE-2006-3012.md): SQL injection vulnerability in phpBannerExchange before 2.0 Update 6 allows remote attackers to execute arbitrary SQL commands via the (1) l (no CVSS)
- [CVE-2006-3013](https://cve.now/CVE-2006-3013.md): Interpretation conflict in resetpw.php in phpBannerExchange before 2.0 Update 6 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2006-3060](https://cve.now/CVE-2006-3060.md): Cross-site scripting (XSS) vulnerability in P.A.I.D 2.2 allows remote attackers to inject arbitrary web script or HTML via the (1) read para (no CVSS)
- [CVE-2006-3061](https://cve.now/CVE-2006-3061.md): Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the ( (no CVSS)
- [CVE-2006-3062](https://cve.now/CVE-2006-3062.md): Cross-site scripting (XSS) vulnerability in index.php in myPHP Guestbook 2.0.4 and earlier allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2006-3063](https://cve.now/CVE-2006-3063.md): Multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and before 2.0.1 RC5 allow remote attackers to i (no CVSS)
- [CVE-2006-3064](https://cve.now/CVE-2006-3064.md): SQL injection vulnerability in the add\_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep detailed (no CVSS)
- [CVE-2006-3065](https://cve.now/CVE-2006-3065.md): SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQL commands via the I (no CVSS)
- [CVE-2006-3066](https://cve.now/CVE-2006-3066.md): Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2006-3067](https://cve.now/CVE-2006-3067.md): Multiple unspecified vulnerabilities in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allow remote attackers to cause a denial of se (no CVSS)
- [CVE-2006-3068](https://cve.now/CVE-2006-3068.md): IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 allows remote attackers to cause a denial of service (application crash) by sending "i (no CVSS)
- [CVE-2006-3069](https://cve.now/CVE-2006-3069.md): PHP remote file inclusion vulnerability in DoubleSpeak 0.1, when register\_globals is enabled, allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-3070](https://cve.now/CVE-2006-3070.md): write\_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod\_mime, allows remote attackers to bypass restrictions for uploading file (no CVSS)
- [CVE-2006-3071](https://cve.now/CVE-2006-3071.md): Cross-site scripting (XSS) vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2006-3072](https://cve.now/CVE-2006-3072.md): M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via craf (no CVSS)
- [CVE-2006-3073](https://cve.now/CVE-2006-3073.md): Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Seri (no CVSS)
- [CVE-2006-3074](https://cve.now/CVE-2006-3074.md): klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 f (no CVSS)
- [CVE-2006-3075](https://cve.now/CVE-2006-3075.md): Multiple PHP remote file inclusion vulnerabilities in PictureDis Professional 1.33 Build 234 and earlier and PictureDis Photoalbum 4.82 and (no CVSS)
- [CVE-2006-3076](https://cve.now/CVE-2006-3076.md): PHP remote file inclusion vulnerability in software\_upload/public\_includes/pub\_templates/vphptree/template.php in PhpBlueDragon CMS 2.9.1 al (no CVSS)
- [CVE-2006-3077](https://cve.now/CVE-2006-3077.md): Cross-site scripting (XSS) vulnerability in guestbook.cfm in aXentGuestbook 1.1 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-3078](https://cve.now/CVE-2006-3078.md): Multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) PH (no CVSS)
- [CVE-2006-3079](https://cve.now/CVE-2006-3079.md): Cross-site scripting (XSS) vulnerability in index.cfm in SSPwiz Plus 1.0.7 and earlier allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2006-3080](https://cve.now/CVE-2006-3080.md): Cross-site scripting (XSS) vulnerability in viewposts.cfm in aXentForum II and earlier allows remote attackers to inject arbitrary web scrip (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.