# CVEs published 2006-07-20 9 CVEs were published on July 20, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-3748](https://cve.now/CVE-2006-3748.md): PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and possibly other versio (no CVSS) - [CVE-2006-3749](https://cve.now/CVE-2006-3749.md): PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component (com\_sitemap) 2.0.0 for Mambo 4.5.1 CMS, when register\_globa (no CVSS) - [CVE-2006-3750](https://cve.now/CVE-2006-3750.md): PHP remote file inclusion vulnerability in server.php in the Hashcash Component (com\_hashcash) 1.2.1 for Joomla! allows remote attackers to (no CVSS) - [CVE-2006-3751](https://cve.now/CVE-2006-3751.md): PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component (com\_htmlarea3\_xtd-c) for Ima (no CVSS) - [CVE-2006-3752](https://cve.now/CVE-2006-3752.md): Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQ (no CVSS) - [CVE-2006-3753](https://cve.now/CVE-2006-3753.md): setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a coo (no CVSS) - [CVE-2006-3754](https://cve.now/CVE-2006-3754.md): PHP remote file inclusion vulnerability in Include/editor/rich\_files/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attacke (no CVSS) - [CVE-2006-3755](https://cve.now/CVE-2006-3755.md): PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to execu (no CVSS) - [CVE-2006-3756](https://cve.now/CVE-2006-3756.md): Cross-site scripting (XSS) vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject arbit (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-07-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.