# CVEs published 2006-06-23

41 CVEs were published on June 23, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2918](https://cve.now/CVE-2006-2918.md): The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes (no CVSS)
- [CVE-2006-2915](https://cve.now/CVE-2006-2915.md): Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) (no CVSS)
- [CVE-2006-3198](https://cve.now/CVE-2006-3198.md): Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width va (no CVSS)
- [CVE-2006-3199](https://cve.now/CVE-2006-3199.md): Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL containing a long hostna (no CVSS)
- [CVE-2006-3200](https://cve.now/CVE-2006-3200.md): Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service (crash) via an IFRAME with a src tag containin (no CVSS)
- [CVE-2006-3201](https://cve.now/CVE-2006-3201.md): Unspecified vulnerability in the kernel in HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service (no CVSS)
- [CVE-2006-3202](https://cve.now/CVE-2006-3202.md): The ip6\_savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being (no CVSS)
- [CVE-2006-2914](https://cve.now/CVE-2006-2914.md): PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder p (no CVSS)
- [CVE-2006-2445](https://cve.now/CVE-2006-2445.md): Race condition in run\_posix\_cpu\_timers in Linux kernel before 2.6.16.21 allows local users to cause a denial of service (BUG\_ON crash) by ca (no CVSS)
- [CVE-2006-2448](https://cve.now/CVE-2006-2448.md): Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access\_ok checks, which allows local us (no CVSS)
- [CVE-2006-3085](https://cve.now/CVE-2006-3085.md): xt\_sctp in netfilter for Linux kernel before 2.6.17.1 allows attackers to cause a denial of service (infinite loop) via an SCTP chunk with a (no CVSS)
- [CVE-2006-3168](https://cve.now/CVE-2006-3168.md): SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) debut p (no CVSS)
- [CVE-2006-3169](https://cve.now/CVE-2006-3169.md): Multiple cross-site scripting (XSS) vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2006-3170](https://cve.now/CVE-2006-3170.md): CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty coll (no CVSS)
- [CVE-2006-3171](https://cve.now/CVE-2006-3171.md): CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in th (no CVSS)
- [CVE-2006-3172](https://cve.now/CVE-2006-3172.md): Multiple PHP remote file inclusion vulnerabilities in Content\*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL w (no CVSS)
- [CVE-2006-3173](https://cve.now/CVE-2006-3173.md): Multiple PHP remote file inclusion vulnerabilities in Content\*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL i (no CVSS)
- [CVE-2006-3174](https://cve.now/CVE-2006-3174.md): Cross-site scripting (XSS) vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when register\_globals is enabled, allows remote at (no CVSS)
- [CVE-2006-3175](https://cve.now/CVE-2006-3175.md): Multiple PHP remote file inclusion vulnerabilities in mcGuestbook 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2006-3176](https://cve.now/CVE-2006-3176.md): SQL injection vulnerability in xarancms\_haupt.php in xarancms 2.0 allows remote attackers to execute arbitrary SQL commands via the id param (no CVSS)
- [CVE-2006-3177](https://cve.now/CVE-2006-3177.md): PHP remote file inclusion vulnerability in Admin/rtf\_parser.php in The Bible Portal Project 2.12 and earlier allows remote attackers to exec (no CVSS)
- [CVE-2006-3178](https://cve.now/CVE-2006-3178.md): Directory traversal vulnerability in extract\_chmLib example program in CHM Lib (chmlib) before 0.38 allows remote attackers to overwrite arb (no CVSS)
- [CVE-2006-3179](https://cve.now/CVE-2006-3179.md): Cross-site scripting (XSS) vulnerability in tools\_ftp\_pwaendern.php in Confixx Pro 3.0 and earlier allows remote attackers to inject arbitra (no CVSS)
- [CVE-2006-3180](https://cve.now/CVE-2006-3180.md): Cross-site scripting (XSS) vulnerability in ftp\_index.php in Confixx Pro 3.0 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-3181](https://cve.now/CVE-2006-3181.md): SQL injection vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-3182](https://cve.now/CVE-2006-3182.md): Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2006-3183](https://cve.now/CVE-2006-3183.md): Cross-site scripting (XSS) vulnerability in index.php in MobeScripts Mobile Space Community 2.0 and earlier allows remote attackers to injec (no CVSS)
- [CVE-2006-3184](https://cve.now/CVE-2006-3184.md): Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary AS (no CVSS)
- [CVE-2006-3185](https://cve.now/CVE-2006-3185.md): PHP remote file inclusion vulnerability in data/header.php in CMS Faethon 1.3.2 allows remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2006-3186](https://cve.now/CVE-2006-3186.md): Multiple cross-site scripting (XSS) vulnerabilities in CMS Faethon 1.3.2 allow remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2006-3187](https://cve.now/CVE-2006-3187.md): Multiple cross-site scripting (XSS) vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-3188](https://cve.now/CVE-2006-3188.md): Multiple SQL injection vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to execute arbitrary SQL commands via the (1 (no CVSS)
- [CVE-2006-3189](https://cve.now/CVE-2006-3189.md): Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in HotPlug CMS 1.0 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2006-3190](https://cve.now/CVE-2006-3190.md): SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0 allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2006-3191](https://cve.now/CVE-2006-3191.md): Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web script or HTML via the p (no CVSS)
- [CVE-2006-3192](https://cve.now/CVE-2006-3192.md): PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via a URL in the (1) ipa (no CVSS)
- [CVE-2006-3193](https://cve.now/CVE-2006-3193.md): Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register\_globals is enabled, allow remote attackers (no CVSS)
- [CVE-2006-3194](https://cve.now/CVE-2006-3194.md): Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2006-3195](https://cve.now/CVE-2006-3195.md): Cross-site scripting (XSS) vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-3196](https://cve.now/CVE-2006-3196.md): index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which r (no CVSS)
- [CVE-2006-3197](https://cve.now/CVE-2006-3197.md): Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web scr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.