# CVEs published 2006-08-16

13 CVEs were published on August 16, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4030](https://cve.now/CVE-2006-4030.md): Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via u (no CVSS)
- [CVE-2006-4155](https://cve.now/CVE-2006-4155.md): Unspecified vulnerability in func\_topic\_threaded.php (aka threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allow (no CVSS)
- [CVE-2006-4156](https://cve.now/CVE-2006-4156.md): PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2006-4157](https://cve.now/CVE-2006-4157.md): Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2006-4158](https://cve.now/CVE-2006-4158.md): PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-4159](https://cve.now/CVE-2006-4159.md): Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-4160](https://cve.now/CVE-2006-4160.md): Multiple PHP remote file inclusion vulnerabilities in Tony Bibbs and Vincent Furia MVCnPHP 3.0 allow remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-4161](https://cve.now/CVE-2006-4161.md): Directory traversal vulnerability in the avatar\_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read a (no CVSS)
- [CVE-2006-4162](https://cve.now/CVE-2006-4162.md): Cross-site scripting (XSS) vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-4163](https://cve.now/CVE-2006-4163.md): PHP remote file inclusion vulnerability in cls\_fast\_template.php in myWebland miniBloggie 1.0 and earlier allows remote attackers to execute (no CVSS)
- [CVE-2006-4164](https://cve.now/CVE-2006-4164.md): PHP remote file inclusion vulnerability in inc/header.inc.php in phpPrintAnalyzer 1.2 and earlier allows remote attackers to execute arbitra (no CVSS)
- [CVE-2006-4165](https://cve.now/CVE-2006-4165.md): Cross-site scripting (XSS) vulnerability in NetCommons 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-4166](https://cve.now/CVE-2006-4166.md): PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.