# CVEs published 2006-07-25 32 CVEs were published on July 25, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-3119](https://cve.now/CVE-2006-3119.md): The fbgs framebuffer Postscript/PDF viewer in fbi before 2.01 has a typo that prevents a filter from working correctly, which allows user-as (no CVSS) - [CVE-2006-3841](https://cve.now/CVE-2006-3841.md): Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3. (no CVSS) - [CVE-2006-3842](https://cve.now/CVE-2006-3842.md): Cross-site scripting (XSS) vulnerability in Zoho Virtual Office 3.2 Build 3210 allows remote attackers to execute arbitrary web script or HT (no CVSS) - [CVE-2006-3843](https://cve.now/CVE-2006-3843.md): PHP remote file inclusion vulnerability in com\_calendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote attackers to execute ar (no CVSS) - [CVE-2006-3844](https://cve.now/CVE-2006-3844.md): Buffer overflow in Quick 'n Easy FTP Server 3.0 allows remote authenticated users to execute arbitrary commands via a long argument to the L (no CVSS) - [CVE-2006-3845](https://cve.now/CVE-2006-3845.md): Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filen (no CVSS) - [CVE-2006-3846](https://cve.now/CVE-2006-3846.md): PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote attackers to execute ar (no CVSS) - [CVE-2006-3847](https://cve.now/CVE-2006-3847.md): PHP remote file inclusion vulnerability in (1) admin.php, and possibly (2) details.php, (3) modify.php, (4) newgroup.php, (5) newtask.php, a (no CVSS) - [CVE-2006-3848](https://cve.now/CVE-2006-3848.md): Cross-site scripting (XSS) vulnerability in CGI wrapper for IP Calculator (IPCalc) 0.40 allows remote attackers to inject arbitrary web scri (no CVSS) - [CVE-2006-3849](https://cve.now/CVE-2006-3849.md): Stack-based buffer overflow in Warzone 2100 and Warzone Resurrection 2.0.3 and earlier allows remote attackers to execute arbitrary code via (no CVSS) - [CVE-2006-3850](https://cve.now/CVE-2006-3850.md): PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/old\_settings.php exists, allows remote (no CVSS) - [CVE-2006-3851](https://cve.now/CVE-2006-3851.md): SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2006-3852](https://cve.now/CVE-2006-3852.md): Cross-site scripting (XSS) vulnerability in index.php in Micro GuestBook allows remote attackers to execute arbitrary SQL commands via the ( (no CVSS) - [CVE-2006-3619](https://cve.now/CVE-2006-3619.md): Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attacke (no CVSS) - [CVE-2006-3837](https://cve.now/CVE-2006-3837.md): delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, whic (no CVSS) - [CVE-2006-3820](https://cve.now/CVE-2006-3820.md): Cross-site scripting (XSS) vulnerability in loudblog/index.php in Loudblog before 0.5 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-3821](https://cve.now/CVE-2006-3821.md): Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1 (no CVSS) - [CVE-2006-3822](https://cve.now/CVE-2006-3822.md): SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2006-3823](https://cve.now/CVE-2006-3823.md): SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic 2.0.3 allows remote (no CVSS) - [CVE-2006-3824](https://cve.now/CVE-2006-3824.md): systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which caus (no CVSS) - [CVE-2006-3825](https://cve.now/CVE-2006-3825.md): The IPv4 implementation in Sun Solaris 10 before 20060721 allows local users to select routes that differ from the routing table, possibly f (no CVSS) - [CVE-2006-3826](https://cve.now/CVE-2006-3826.md): Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allow remote attackers (no CVSS) - [CVE-2006-3827](https://cve.now/CVE-2006-3827.md): SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows rem (no CVSS) - [CVE-2006-3828](https://cve.now/CVE-2006-3828.md): Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrato (no CVSS) - [CVE-2006-3829](https://cve.now/CVE-2006-3829.md): Cross-site request forgery (CSRF) vulnerability in bmc/admin.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows rem (no CVSS) - [CVE-2006-3830](https://cve.now/CVE-2006-3830.md): The Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated (no CVSS) - [CVE-2006-3831](https://cve.now/CVE-2006-3831.md): The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and sto (no CVSS) - [CVE-2006-3832](https://cve.now/CVE-2006-3832.md): SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL comma (no CVSS) - [CVE-2006-3833](https://cve.now/CVE-2006-3833.md): index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries (no CVSS) - [CVE-2006-3834](https://cve.now/CVE-2006-3834.md): EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry p (no CVSS) - [CVE-2006-3835](https://cve.now/CVE-2006-3835.md): Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, (no CVSS, org.apache.tomcat:tomcat) - [CVE-2006-3836](https://cve.now/CVE-2006-3836.md): Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote attac (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-07-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.