# CVEs published 2006-09-11

15 CVEs were published on September 11, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4623](https://cve.now/CVE-2006-4623.md): The Unidirectional Lightweight Encapsulation (ULE) decapsulation component in dvb-core/dvb\_net.c in the dvb driver in the Linux kernel 2.6.1 (no CVSS)
- [CVE-2006-4674](https://cve.now/CVE-2006-4674.md): Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2006-4675](https://cve.now/CVE-2006-4675.md): Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable file (no CVSS)
- [CVE-2006-4676](https://cve.now/CVE-2006-4676.md): TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive inf (no CVSS)
- [CVE-2006-4677](https://cve.now/CVE-2006-4677.md): PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-4678](https://cve.now/CVE-2006-4678.md): PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the \_NE\[AbsPath\] p (no CVSS)
- [CVE-2006-4679](https://cve.now/CVE-2006-4679.md): DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling d (no CVSS)
- [CVE-2006-4680](https://cve.now/CVE-2006-4680.md): The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers (no CVSS)
- [CVE-2006-4681](https://cve.now/CVE-2006-4681.md): Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2006-4682](https://cve.now/CVE-2006-4682.md): Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (crash) via unspecified (no CVSS)
- [CVE-2006-4683](https://cve.now/CVE-2006-4683.md): IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE. (no CVSS)
- [CVE-2002-2217](https://cve.now/CVE-2002-2217.md): Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote attackers to execute (no CVSS)
- [CVE-2006-4671](https://cve.now/CVE-2006-4671.md): PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote attackers to execute a (no CVSS)
- [CVE-2006-4672](https://cve.now/CVE-2006-4672.md): PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote attackers to execut (no CVSS)
- [CVE-2006-4673](https://cve.now/CVE-2006-4673.md): Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, whic (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-09-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.