# CVEs published 2006-09-01

12 CVEs were published on September 1, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4522](https://cve.now/CVE-2006-4522.md): Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified (no CVSS)
- [CVE-2006-4523](https://cve.now/CVE-2006-4523.md): The web-based management interface in 2Wire, Inc. (no CVSS)
- [CVE-2006-4524](https://cve.now/CVE-2006-4524.md): Multiple SQL injection vulnerabilities in login\_verif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-4525](https://cve.now/CVE-2006-4525.md): Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register\_globals is enabled, allows remote attackers to inject (no CVSS)
- [CVE-2006-4526](https://cve.now/CVE-2006-4526.md): SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register\_globals is enabled, allows rem (no CVSS)
- [CVE-2006-4527](https://cve.now/CVE-2006-4527.md): includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magic\_quotes\_gpc is disabled, uses an insufficiently restrictive regul (no CVSS)
- [CVE-2006-4528](https://cve.now/CVE-2006-4528.md): Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-4529](https://cve.now/CVE-2006-4529.md): SQL injection vulnerability in recherchemembre.php in membrepass 1.5. (no CVSS)
- [CVE-2006-4530](https://cve.now/CVE-2006-4530.md): Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-4531](https://cve.now/CVE-2006-4531.md): PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2006-4532](https://cve.now/CVE-2006-4532.md): PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and earlier allows remote a (no CVSS)
- [CVE-2006-4533](https://cve.now/CVE-2006-4533.md): Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-09-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.