# CVEs published 2006-08-21

38 CVEs were published on August 21, 2006: 1 critical, 0 high. Days are UTC.

- [CVE-2006-4275](https://cve.now/CVE-2006-4275.md): PHP remote file inclusion vulnerability in catalogshop.php in the CatalogShop component for Mambo (com\_catalogshop) allows remote attackers (no CVSS)
- [CVE-2006-4276](https://cve.now/CVE-2006-4276.md): PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2006-4277](https://cve.now/CVE-2006-4277.md): Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2006-4278](https://cve.now/CVE-2006-4278.md): PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-4279](https://cve.now/CVE-2006-4279.md): SQL injection vulnerability in topic\_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-4280](https://cve.now/CVE-2006-4280.md): PHP remote file inclusion vulnerability in anjel.index.php in ANJEL (formerly MaMML) Component (com\_anjel) for Mambo allows remote attackers (no CVSS)
- [CVE-2006-4281](https://cve.now/CVE-2006-4281.md): PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module (com\_akocomment) for Mambo 4.5 allows remote attackers t (no CVSS)
- [CVE-2006-4093](https://cve.now/CVE-2006-4093.md): Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on PowerPC PPC970 systems allows local users to cause a denial of service (cras (no CVSS)
- [CVE-2006-4263](https://cve.now/CVE-2006-4263.md): Multiple PHP remote file inclusion vulnerabilities in the Product Scroller Module and other modules in mambo-phpshop (com\_phpshop) for Mambo (no CVSS)
- [CVE-2006-4264](https://cve.now/CVE-2006-4264.md): Multiple PHP remote file inclusion vulnerabilities in the lmtg\_myhomepage Component (com\_lmtg\_myhomepage) for Mambo allow remote attackers t (CVSS 9.8)
- [CVE-2006-4265](https://cve.now/CVE-2006-4265.md): Kaspersky Anti-Hacker 1.8.180, when Stealth Mode is enabled, allows remote attackers to obtain responses to ICMP (1) timestamp and (2) netma (no CVSS)
- [CVE-2006-4266](https://cve.now/CVE-2006-4266.md): Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect Norton registry keys, which allows local us (no CVSS)
- [CVE-2006-4267](https://cve.now/CVE-2006-4267.md): Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) o (no CVSS)
- [CVE-2006-4268](https://cve.now/CVE-2006-4268.md): Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-4269](https://cve.now/CVE-2006-4269.md): PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com\_x-shop) 1.7 and earlier for Mambo and Joomla! allow (no CVSS)
- [CVE-2006-4270](https://cve.now/CVE-2006-4270.md): PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component (com\_mambelfish) 1.1 and earlier for Mambo allow (no CVSS)
- [CVE-2006-4271](https://cve.now/CVE-2006-4271.md): PHP remote file inclusion vulnerability in install/upgrade\_301.php in Jelsoft vBulletin 3.5.4 allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-4272](https://cve.now/CVE-2006-4272.md): Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary users and cause a denial of service (resource consumption) vi (no CVSS)
- [CVE-2006-4273](https://cve.now/CVE-2006-4273.md): Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-4253](https://cve.now/CVE-2006-4253.md): Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly e (no CVSS)
- [CVE-2006-4254](https://cve.now/CVE-2006-4254.md): Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors. (no CVSS)
- [CVE-2006-4255](https://cve.now/CVE-2006-4255.md): Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary w (no CVSS)
- [CVE-2006-4256](https://cve.now/CVE-2006-4256.md): index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful f (no CVSS)
- [CVE-2006-4257](https://cve.now/CVE-2006-4257.md): IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending (no CVSS)
- [CVE-2006-4258](https://cve.now/CVE-2006-4258.md): Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy (ASSP) allows remote authenticated users to read arbi (no CVSS)
- [CVE-2006-4259](https://cve.now/CVE-2006-4259.md): Cross-site scripting (XSS) vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-4260](https://cve.now/CVE-2006-4260.md): Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. (no CVSS)
- [CVE-2006-3506](https://cve.now/CVE-2006-3506.md): Buffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows local users with Xsan write access, to execut (no CVSS)
- [CVE-2006-4145](https://cve.now/CVE-2006-4145.md): The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang a (no CVSS)
- [CVE-2006-0948](https://cve.now/CVE-2006-0948.md): AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America (no CVSS)
- [CVE-2006-4235](https://cve.now/CVE-2006-4235.md): Buffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00 through 2.2.01 allows remote attackers to exe (no CVSS)
- [CVE-2006-4236](https://cve.now/CVE-2006-4236.md): Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) sho (no CVSS)
- [CVE-2006-4237](https://cve.now/CVE-2006-4237.md): PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and earlier allows remot (no CVSS)
- [CVE-2006-4238](https://cve.now/CVE-2006-4238.md): SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2006-4239](https://cve.now/CVE-2006-4239.md): PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool (OPT) Max 1.2.6 and earlier allows remote attackers (no CVSS)
- [CVE-2006-4240](https://cve.now/CVE-2006-4240.md): PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in t (no CVSS)
- [CVE-2006-4241](https://cve.now/CVE-2006-4241.md): PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com\_reporter) allows remote attackers (no CVSS)
- [CVE-2006-4242](https://cve.now/CVE-2006-4242.md): PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.