# CVEs published 2006-08-22

12 CVEs were published on August 22, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4282](https://cve.now/CVE-2006-4282.md): PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component (com\_mambowiki) 0.9.6 and earlier for Mambo and Joomla! (no CVSS)
- [CVE-2006-4283](https://cve.now/CVE-2006-4283.md): Multiple PHP remote file inclusion vulnerabilities in SOLMETRA SPAW Editor 1.0.6 and 1.0.7 allow remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2006-4284](https://cve.now/CVE-2006-4284.md): SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2006-4285](https://cve.now/CVE-2006-4285.md): PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2006-4286](https://cve.now/CVE-2006-4286.md): PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com\_contentpublisher) for Mambo allows re (no CVSS)
- [CVE-2006-4287](https://cve.now/CVE-2006-4287.md): Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2006-4288](https://cve.now/CVE-2006-4288.md): PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component (com\_a6mambocredits) 2.0.0 and earlier f (no CVSS)
- [CVE-2006-4289](https://cve.now/CVE-2006-4289.md): Buffer overflow in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to execute arbitrary code via unspe (no CVSS)
- [CVE-2006-4290](https://cve.now/CVE-2006-4290.md): Directory traversal vulnerability in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to gain sensitive (no CVSS)
- [CVE-2006-4291](https://cve.now/CVE-2006-4291.md): PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote (no CVSS)
- [CVE-2006-4292](https://cve.now/CVE-2006-4292.md): Unspecified vulnerability in Niels Provos Honeyd before 1.5b allows remote attackers to cause a denial of service (application crash) via ce (no CVSS)
- [CVE-2006-4293](https://cve.now/CVE-2006-4293.md): Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the (1) d (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
