# CVEs published 2006-08-24 26 CVEs were published on August 24, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-4347](https://cve.now/CVE-2006-4347.md): SQL injection vulnerability in user logon authentication request handling in Cool\_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messen (no CVSS) - [CVE-2006-4348](https://cve.now/CVE-2006-4348.md): PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite (com\_kochsuite) 0.9.4 component for Mambo and Joomla! allow (no CVSS) - [CVE-2006-4349](https://cve.now/CVE-2006-4349.md): PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in th (no CVSS) - [CVE-2006-4350](https://cve.now/CVE-2006-4350.md): SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter (no CVSS) - [CVE-2006-4351](https://cve.now/CVE-2006-4351.md): Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2006-4330](https://cve.now/CVE-2006-4330.md): Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal) 0.99.2 allows remote attackers to cause a denial of service (no CVSS) - [CVE-2006-4331](https://cve.now/CVE-2006-4331.md): Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a deni (no CVSS) - [CVE-2006-4332](https://cve.now/CVE-2006-4332.md): Unspecified vulnerability in the DHCP dissector in Wireshark (formerly Ethereal) 0.10.13 through 0.99.2, when run on Windows, allows remote (no CVSS) - [CVE-2006-4333](https://cve.now/CVE-2006-4333.md): The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumptio (no CVSS) - [CVE-2006-4344](https://cve.now/CVE-2006-4344.md): CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails and inject e-mail hea (no CVSS) - [CVE-2006-4345](https://cve.now/CVE-2006-4345.md): Stack-based buffer overflow in channels/chan\_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2006-4346](https://cve.now/CVE-2006-4346.md): Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers (no CVSS) - [CVE-2006-4317](https://cve.now/CVE-2006-4317.md): Cross-site scripting (XSS) vulnerability in attachment.php in WoltLab Burning Board (WBB) 2.3.5 allows remote attackers to inject arbitrary (no CVSS) - [CVE-2006-4318](https://cve.now/CVE-2006-4318.md): Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands. (no CVSS) - [CVE-2006-4319](https://cve.now/CVE-2006-4319.md): Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" (no CVSS) - [CVE-2006-4320](https://cve.now/CVE-2006-4320.md): PHP remote file inclusion vulnerability in sef.php in the OpenSEF 2.0.0 component for Joomla! allows remote attackers to execute arbitrary P (no CVSS) - [CVE-2006-4321](https://cve.now/CVE-2006-4321.md): PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com\_cpg) 1.0 and earlier for Mambo allows remo (no CVSS) - [CVE-2006-4322](https://cve.now/CVE-2006-4322.md): PHP remote file inclusion vulnerability in estateagent.php in the EstateAgent component (com\_estateagent) for Mambo, when register\_globals i (no CVSS) - [CVE-2006-4323](https://cve.now/CVE-2006-4323.md): SQL injection vulnerability in list.php in CityForFree indexcity 1.0, when magic\_quotes\_gpc is disabled, allows remote attackers to execute (no CVSS) - [CVE-2006-4324](https://cve.now/CVE-2006-4324.md): Cross-site scripting (XSS) vulnerability in add\_url2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-4325](https://cve.now/CVE-2006-4325.md): Cross-site scripting (XSS) vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitr (no CVSS) - [CVE-2006-4326](https://cve.now/CVE-2006-4326.md): Stack-based buffer overflow in Justsystem Ichitaro 9.x through 13.x, Ichitaro 2004, 2005, 2006, and Government 2006; Ichitaro for Linux; and (no CVSS) - [CVE-2006-4327](https://cve.now/CVE-2006-4327.md): Multiple cross-site scripting (XSS) vulnerabilities in add\_url.php in CloudNine Interactive Links Manager 2006-06-12 allow remote attackers (no CVSS) - [CVE-2006-4328](https://cve.now/CVE-2006-4328.md): SQL injection vulnerability in admin.php in CloudNine Interactive Links Manager 2006-06-12, when magic\_quotes\_gpc is disabled, allows remote (no CVSS) - [CVE-2006-4329](https://cve.now/CVE-2006-4329.md): Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote attackers to execute ar (no CVSS) - [CVE-2006-4304](https://cve.now/CVE-2006-4304.md): Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-08-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.