# CVEs published 2006-09-08

23 CVEs were published on September 8, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2482](https://cve.now/CVE-2006-2482.md): Heap-based buffer overflow in the TZipTV component in (1) ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, (2) PentaZip 8.5.1.190 (no CVSS)
- [CVE-2006-4379](https://cve.now/CVE-2006-4379.md): Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IM (no CVSS)
- [CVE-2006-4641](https://cve.now/CVE-2006-4641.md): SQL injection vulnerability in kategori.asp in Muratsoft Haber Portal 3.6 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-4642](https://cve.now/CVE-2006-4642.md): AuditWizard 6.3.2, when using "Remote Audit," logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to (no CVSS)
- [CVE-2006-4643](https://cve.now/CVE-2006-4643.md): SQL injection vulnerability in consult/joueurs.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2006-4644](https://cve.now/CVE-2006-4644.md): PHP remote file inclusion vulnerability in modules/home.module.php in phpFullAnnu 5.1 and earlier allows remote attackers to execute arbitra (no CVSS)
- [CVE-2006-4645](https://cve.now/CVE-2006-4645.md): PHP remote file inclusion vulnerability in akarru.gui/main\_content.php in Akarru Social BookMarking Engine 0.4.3.34 and earlier, and possibl (no CVSS)
- [CVE-2006-4646](https://cve.now/CVE-2006-4646.md): Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Pathauto module before pathauto\_node.inc 1.17.2.1 and the Drupal 4.6 Pathauto mod (no CVSS)
- [CVE-2006-4647](https://cve.now/CVE-2006-4647.md): PHP remote file inclusion vulnerability in news.php in Sponge News 2.2 and earlier allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-4648](https://cve.now/CVE-2006-4648.md): PHP remote file inclusion vulnerability in bp\_ncom.php in BinGo News (BP News) 3.01 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-4649](https://cve.now/CVE-2006-4649.md): PHP remote file inclusion vulnerability in bp\_news.php in BinGo News (BP News) 3.01 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-4628](https://cve.now/CVE-2006-4628.md): Cross-site scripting (XSS) vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecifi (no CVSS)
- [CVE-2006-4629](https://cve.now/CVE-2006-4629.md): PHP remote file inclusion vulnerability in affichage/commentaires.php in C-News.fr C-News 1.0.1 and earlier allows remote attackers to execu (no CVSS)
- [CVE-2006-4630](https://cve.now/CVE-2006-4630.md): PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when register\_globals is enabled, allows r (no CVSS)
- [CVE-2006-4631](https://cve.now/CVE-2006-4631.md): Direct static code injection vulnerability in admin/save\_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to u (no CVSS)
- [CVE-2006-4632](https://cve.now/CVE-2006-4632.md): Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-4633](https://cve.now/CVE-2006-4633.md): index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page\[\] paramete (no CVSS)
- [CVE-2006-4634](https://cve.now/CVE-2006-4634.md): Cross-site scripting (XSS) vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserI (no CVSS)
- [CVE-2006-4635](https://cve.now/CVE-2006-4635.md): Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to (no CVSS)
- [CVE-2006-4636](https://cve.now/CVE-2006-4636.md): Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local files (no CVSS)
- [CVE-2006-4637](https://cve.now/CVE-2006-4637.md): Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2006-4638](https://cve.now/CVE-2006-4638.md): PHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2006-4639](https://cve.now/CVE-2006-4639.md): Multiple PHP remote file inclusion vulnerabilities in C-News.fr C-News 1.0.1 and earlier, when register\_globals is enabled, allow remote att (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-09-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.