# CVEs published 2006-06-30

21 CVEs were published on June 30, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3323](https://cve.now/CVE-2006-3323.md): PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary PHP code via the pa (no CVSS)
- [CVE-2006-3324](https://cve.now/CVE-2006-3324.md): The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote attac (no CVSS)
- [CVE-2006-3325](https://cve.now/CVE-2006-3325.md): client/cl\_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier allows remote malicious (no CVSS)
- [CVE-2006-3326](https://cve.now/CVE-2006-3326.md): Directory traversal vulnerability in QuickZip 3.06.3 allows remote user-assisted attackers to overwrite arbitrary files or directories via . (no CVSS)
- [CVE-2006-3327](https://cve.now/CVE-2006-3327.md): Cross-site scripting (XSS) vulnerability in Custom dating biz dating script 1.0 allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2006-3328](https://cve.now/CVE-2006-3328.md): new\_ticket.cgi in Hostflow 2.2.1-15 allows remote attackers to steal and replay authentication credentials via an IMG tag in the desc parame (no CVSS)
- [CVE-2006-3329](https://cve.now/CVE-2006-3329.md): SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2006-3330](https://cve.now/CVE-2006-3330.md): Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbi (no CVSS)
- [CVE-2006-3331](https://cve.now/CVE-2006-3331.md): Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote att (no CVSS)
- [CVE-2006-3332](https://cve.now/CVE-2006-3332.md): SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2 (no CVSS)
- [CVE-2006-3333](https://cve.now/CVE-2006-3333.md): Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to inject web script or HTML via the multip (no CVSS)
- [CVE-2006-3334](https://cve.now/CVE-2006-3334.md): Buffer overflow in the png\_decompress\_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a den (no CVSS)
- [CVE-2006-2934](https://cve.now/CVE-2006-2934.md): SCTP conntrack (ip\_conntrack\_proto\_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote at (no CVSS)
- [CVE-2006-3322](https://cve.now/CVE-2006-3322.md): SQL injection vulnerability in includes/functions\_logging.php in phpRaid 3.0.5, and possibly other versions, allows remote attackers to exec (no CVSS)
- [CVE-2006-3118](https://cve.now/CVE-2006-3118.md): spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creat (no CVSS)
- [CVE-2006-2198](https://cve.now/CVE-2006-2198.md): OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities v (no CVSS)
- [CVE-2006-2199](https://cve.now/CVE-2006-2199.md): Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted a (no CVSS)
- [CVE-2006-3117](https://cve.now/CVE-2006-3117.md): Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to exe (no CVSS)
- [CVE-2006-3321](https://cve.now/CVE-2006-3321.md): Multiple cross-site scripting (XSS) vulnerabilities in openforum.asp in OpenForum 1.2 Beta and earlier allow remote attackers to inject arbi (no CVSS)
- [CVE-2006-3319](https://cve.now/CVE-2006-3319.md): Cross-site scripting (XSS) vulnerability in rss/index.php in PHP iCalendar 2.22 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-3320](https://cve.now/CVE-2006-3320.md): Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.