# CVEs published 2006-08-30

14 CVEs were published on August 30, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4452](https://cve.now/CVE-2006-4452.md): PHP remote file inclusion vulnerability in security/include/\_class.security.php in Web3news 0.95 and earlier, when register\_globals is enabl (no CVSS)
- [CVE-2006-4453](https://cve.now/CVE-2006-4453.md): Cross-site scripting (XSS) vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecif (no CVSS)
- [CVE-2006-4454](https://cve.now/CVE-2006-4454.md): Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2006-4455](https://cve.now/CVE-2006-4455.md): Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via unspecified vectors in (no CVSS)
- [CVE-2003-1305](https://cve.now/CVE-2003-1305.md): Microsoft Internet Explorer allows remote attackers to cause a denial of service (resource consumption) via a Javascript src attribute that (no CVSS)
- [CVE-2005-4809](https://cve.now/CVE-2005-4809.md): Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status (no CVSS)
- [CVE-2005-4810](https://cve.now/CVE-2005-4810.md): Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Conten (no CVSS)
- [CVE-2006-4305](https://cve.now/CVE-2006-4305.md): Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connect (no CVSS)
- [CVE-2006-4446](https://cve.now/CVE-2006-4446.md): Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote atta (no CVSS)
- [CVE-2006-4447](https://cve.now/CVE-2006-4447.md): X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid (no CVSS)
- [CVE-2006-4448](https://cve.now/CVE-2006-4448.md): Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when register\_globals is enabled, allow remote attackers to execute arbi (no CVSS)
- [CVE-2006-4449](https://cve.now/CVE-2006-4449.md): Cross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and possibly other versions allows remote attacke (no CVSS)
- [CVE-2006-4450](https://cve.now/CVE-2006-4450.md): usercp\_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting (no CVSS)
- [CVE-2006-4451](https://cve.now/CVE-2006-4451.md): Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the (1) User-Agent (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.