# CVEs published 2006-08-01

24 CVEs were published on August 1, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3962](https://cve.now/CVE-2006-3962.md): PHP remote file inclusion vulnerability in administrator/components/com\_bayesiannaivefilter/lang.php in the bayesiannaivefilter component (c (no CVSS)
- [CVE-2006-3963](https://cve.now/CVE-2006-3963.md): Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-3964](https://cve.now/CVE-2006-3964.md): PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-3965](https://cve.now/CVE-2006-3965.md): Banex PHP MySQL Banner Exchange 2.21 stores lib.inc under the web document root with insufficient access control, which allows remote attack (no CVSS)
- [CVE-2006-3966](https://cve.now/CVE-2006-3966.md): PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups :) 0.6b and ea (no CVSS)
- [CVE-2006-3967](https://cve.now/CVE-2006-3967.md): PHP remote file inclusion vulnerability in component/option,com\_moskool/Itemid,34/admin.moskool.php in MamboXChange Moskool 1.5 allows remot (no CVSS)
- [CVE-2006-3968](https://cve.now/CVE-2006-3968.md): The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA (no CVSS)
- [CVE-2006-3969](https://cve.now/CVE-2006-3969.md): PHP remote file inclusion vulnerability in administrator/components/com\_colophon/admin.colophon.php in Colophon 1.2 and earlier for Joomla! (no CVSS)
- [CVE-2006-3970](https://cve.now/CVE-2006-3970.md): PHP remote file inclusion vulnerability in lmo.php in the LMO Component (com\_lmo) 1.0b2 and earlier for Joomla! allows remote attackers to e (no CVSS)
- [CVE-2006-3947](https://cve.now/CVE-2006-3947.md): PHP remote file inclusion vulnerability in components/com\_mambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlier component for Mamb (no CVSS)
- [CVE-2006-3948](https://cve.now/CVE-2006-3948.md): Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2006-3949](https://cve.now/CVE-2006-3949.md): PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component (com\_artlinks) for Mambo allows remote attackers t (no CVSS)
- [CVE-2006-3950](https://cve.now/CVE-2006-3950.md): SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-3951](https://cve.now/CVE-2006-3951.md): PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component (com\_moodle) for Mambo allows remote attackers to execut (no CVSS)
- [CVE-2006-3952](https://cve.now/CVE-2006-3952.md): Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long ar (no CVSS)
- [CVE-2006-3953](https://cve.now/CVE-2006-3953.md): Cross-site scripting (XSS) vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-3954](https://cve.now/CVE-2006-3954.md): Directory traversal vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2006-3955](https://cve.now/CVE-2006-3955.md): Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in th (no CVSS)
- [CVE-2006-3956](https://cve.now/CVE-2006-3956.md): Multiple cross-site scripting (XSS) vulnerabilities in contact.php in Advanced Webhost Billing System (AWBS) 2.2.2 allow remote attackers to (no CVSS)
- [CVE-2006-3957](https://cve.now/CVE-2006-3957.md): PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2006-3958](https://cve.now/CVE-2006-3958.md): Multiple unspecified cross-site scripting (XSS) vulnerabilities in Taskjitsu 2.0.3 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-3959](https://cve.now/CVE-2006-3959.md): SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic\_quotes\_gpc disabled, allows remote attackers to execut (no CVSS)
- [CVE-2006-3960](https://cve.now/CVE-2006-3960.md): SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-3961](https://cve.now/CVE-2006-3961.md): Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.