# CVEs published 2006-08-11

25 CVEs were published on August 11, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3813](https://cve.now/CVE-2006-3813.md): A regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE-2005-0155, which allows local users to overwri (no CVSS)
- [CVE-2006-4019](https://cve.now/CVE-2006-4019.md): Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary progr (no CVSS)
- [CVE-2006-3817](https://cve.now/CVE-2006-3817.md): Cross-site scripting (XSS) vulnerability in Novell GroupWise WebAccess 6.5 and 7 before 20060727 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-3818](https://cve.now/CVE-2006-3818.md): Cross-site scripting (XSS) vulnerability in the login page in Novell GroupWise WebAccess 6.5 before 20060721 and WebAccess 7 before 20060727 (no CVSS)
- [CVE-2006-4081](https://cve.now/CVE-2006-4081.md): preview\_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metac (no CVSS)
- [CVE-2006-4082](https://cve.now/CVE-2006-4082.md): Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost (no CVSS)
- [CVE-2006-4083](https://cve.now/CVE-2006-4083.md): PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-4084](https://cve.now/CVE-2006-4084.md): Unspecified vulnerability in phpAutoMembersArea (phpAMA) before 3.2.4 has unknown impact and attack vectors, related to "a potential securit (no CVSS)
- [CVE-2006-4085](https://cve.now/CVE-2006-4085.md): PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allows remote attackers to execu (no CVSS)
- [CVE-2006-4086](https://cve.now/CVE-2006-4086.md): Cross-site scripting (XSS) vulnerability in index.php in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allows remote attackers to inje (no CVSS)
- [CVE-2006-4087](https://cve.now/CVE-2006-4087.md): Cross-site scripting (XSS) vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-4088](https://cve.now/CVE-2006-4088.md): Multiple cross-site scripting (XSS) vulnerabilities in CivicSpace 0.8.5 allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2006-4089](https://cve.now/CVE-2006-4089.md): Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application c (no CVSS)
- [CVE-2006-4090](https://cve.now/CVE-2006-4090.md): Cross-site scripting (XSS) vulnerability in Webligo BlogHoster 2.2 allows remote attackers to inject arbitrary web script or HTML via the "F (no CVSS)
- [CVE-2006-4091](https://cve.now/CVE-2006-4091.md): Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel Weblog 0.90.02 allow remote attackers to inject arbitr (no CVSS)
- [CVE-2006-4092](https://cve.now/CVE-2006-4092.md): Simpliciti Locked Browser does not properly limit a user's actions to ones within the intended Internet Explorer environment, which allows l (no CVSS)
- [CVE-2006-4072](https://cve.now/CVE-2006-4072.md): Multiple SQL injection vulnerabilities in Club-Nuke \[XP\] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2006-4073](https://cve.now/CVE-2006-4073.md): Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2006-4074](https://cve.now/CVE-2006-4074.md): PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component (com\_jd-wiki) 1.0.2 and earlier for Joomla!, wh (no CVSS)
- [CVE-2006-4075](https://cve.now/CVE-2006-4075.md): Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 and earlier allow remote at (no CVSS)
- [CVE-2006-4076](https://cve.now/CVE-2006-4076.md): Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 allow remote attackers to e (no CVSS)
- [CVE-2006-4077](https://cve.now/CVE-2006-4077.md): PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, and possibly earlier, allo (no CVSS)
- [CVE-2006-4078](https://cve.now/CVE-2006-4078.md): pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrar (no CVSS)
- [CVE-2006-4079](https://cve.now/CVE-2006-4079.md): Cross-site scripting (XSS) vulnerability in newpost.php in DeluxeBB 1.08, and possibly earlier, allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-4080](https://cve.now/CVE-2006-4080.md): DeluxeBB 1.08, and possibly earlier, uses cookies that include the MD5 hash of a password, which allows remote attackers to gain privileges (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.