# CVEs published 2006-08-09

42 CVEs were published on August 9, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4040](https://cve.now/CVE-2006-4040.md): PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2006-4041](https://cve.now/CVE-2006-4041.md): SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2006-4042](https://cve.now/CVE-2006-4042.md): Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-4043](https://cve.now/CVE-2006-4043.md): index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies t (no CVSS)
- [CVE-2006-4044](https://cve.now/CVE-2006-4044.md): PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remote attackers to execu (no CVSS)
- [CVE-2006-4045](https://cve.now/CVE-2006-4045.md): PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PHP code via a URL in t (no CVSS)
- [CVE-2006-4046](https://cve.now/CVE-2006-4046.md): Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10\_rc5 and earlier on Linux/BSD, allow (no CVSS)
- [CVE-2006-4047](https://cve.now/CVE-2006-4047.md): SQL injection vulnerability in index.php in Netious CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the us (no CVSS)
- [CVE-2006-4048](https://cve.now/CVE-2006-4048.md): Netious CMS 0.4 initializes session IDs based on the client IP address, which allows remote attackers to gain access to the administration s (no CVSS)
- [CVE-2006-4049](https://cve.now/CVE-2006-4049.md): Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users to create or overwrite arbitrary files (no CVSS)
- [CVE-2006-3122](https://cve.now/CVE-2006-3122.md): The supersede\_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application (no CVSS)
- [CVE-2006-4031](https://cve.now/CVE-2006-4031.md): MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the (no CVSS)
- [CVE-2006-4032](https://cve.now/CVE-2006-4032.md): Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the (no CVSS)
- [CVE-2006-4033](https://cve.now/CVE-2006-4033.md): Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2006-4034](https://cve.now/CVE-2006-4034.md): PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attackers to execute arbit (no CVSS)
- [CVE-2006-4035](https://cve.now/CVE-2006-4035.md): SQL injection vulnerability in counterchaos.php in CounterChaos 0.48c and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-4036](https://cve.now/CVE-2006-4036.md): PHP remote file inclusion vulnerability in includes/usercp\_register.php in ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 and earlier allow (no CVSS)
- [CVE-2006-4037](https://cve.now/CVE-2006-4037.md): Unspecified vulnerability in Fenestrae Faxination Server allows remote attackers to execute arbitrary code via a crafted packet. (no CVSS)
- [CVE-2006-4038](https://cve.now/CVE-2006-4038.md): Multiple cross-site scripting (XSS) vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to inject arbitra (no CVSS)
- [CVE-2006-4039](https://cve.now/CVE-2006-4039.md): Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2006-4028](https://cve.now/CVE-2006-4028.md): Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors. (no CVSS)
- [CVE-2006-4029](https://cve.now/CVE-2006-4029.md): Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP (no CVSS)
- [CVE-2006-3083](https://cve.now/CVE-2006-3083.md): The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (no CVSS)
- [CVE-2006-3084](https://cve.now/CVE-2006-3084.md): The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2 and earlier, do not (no CVSS)
- [CVE-2006-3979](https://cve.now/CVE-2006-3979.md): The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the Cold (no CVSS)
- [CVE-2006-3439](https://cve.now/CVE-2006-3439.md): Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including (no CVSS)
- [CVE-2006-3440](https://cve.now/CVE-2006-3440.md): Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arb (no CVSS)
- [CVE-2006-3441](https://cve.now/CVE-2006-3441.md): Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to exec (no CVSS)
- [CVE-2006-3443](https://cve.now/CVE-2006-3443.md): Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gai (no CVSS)
- [CVE-2006-3648](https://cve.now/CVE-2006-3648.md): Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitr (no CVSS)
- [CVE-2006-3438](https://cve.now/CVE-2006-3438.md): Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to e (no CVSS)
- [CVE-2006-3444](https://cve.now/CVE-2006-3444.md): Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges v (no CVSS)
- [CVE-2006-3449](https://cve.now/CVE-2006-3449.md): Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to ex (no CVSS)
- [CVE-2006-3639](https://cve.now/CVE-2006-3639.md): Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote a (no CVSS)
- [CVE-2006-3640](https://cve.now/CVE-2006-3640.md): Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows remote attackers to o (no CVSS)
- [CVE-2006-3643](https://cve.now/CVE-2006-3643.md): Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedde (no CVSS)
- [CVE-2006-3649](https://cve.now/CVE-2006-3649.md): Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, P (no CVSS)
- [CVE-2006-4022](https://cve.now/CVE-2006-4022.md): Intel 2100 PRO/Wireless Network Connection driver PROSet before 7.1.4.6 allows local users to corrupt memory and execute code via "requests (no CVSS)
- [CVE-2006-4023](https://cve.now/CVE-2006-4023.md): The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network IP address, which allo (no CVSS)
- [CVE-2006-4024](https://cve.now/CVE-2006-4024.md): The FESTAHES\_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) (no CVSS)
- [CVE-2006-4025](https://cve.now/CVE-2006-4025.md): SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-4026](https://cve.now/CVE-2006-4026.md): PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the (1) root (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.