# CVEs published 2006-09-12

34 CVEs were published on September 12, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0001](https://cve.now/CVE-2006-0001.md): Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a c (no CVSS)
- [CVE-2006-0032](https://cve.now/CVE-2006-0032.md): Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is (no CVSS)
- [CVE-2006-3311](https://cve.now/CVE-2006-3311.md): Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote at (no CVSS)
- [CVE-2006-3442](https://cve.now/CVE-2006-3442.md): Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute ar (no CVSS)
- [CVE-2006-3873](https://cve.now/CVE-2006-3873.md): Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch b (no CVSS)
- [CVE-2006-4381](https://cve.now/CVE-2006-4381.md): Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie. (no CVSS)
- [CVE-2006-4382](https://cve.now/CVE-2006-4382.md): Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote attackers to execute arbitrary code via a crafted Quick (no CVSS)
- [CVE-2006-4384](https://cve.now/CVE-2006-4384.md): Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR\_64 (no CVSS)
- [CVE-2006-4385](https://cve.now/CVE-2006-4385.md): Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image. (no CVSS)
- [CVE-2006-4386](https://cve.now/CVE-2006-4386.md): Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie, (no CVSS)
- [CVE-2006-4388](https://cve.now/CVE-2006-4388.md): Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix file (no CVSS)
- [CVE-2006-4389](https://cve.now/CVE-2006-4389.md): Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which trigge (no CVSS)
- [CVE-2006-4640](https://cve.now/CVE-2006-4640.md): Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protec (no CVSS)
- [CVE-2006-2658](https://cve.now/CVE-2006-2658.md): Directory traversal vulnerability in the xsp component in mod\_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE (no CVSS)
- [CVE-2006-4625](https://cve.now/CVE-2006-4625.md): PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe\_mode and (no CVSS)
- [CVE-2006-4705](https://cve.now/CVE-2006-4705.md): SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet (aka Timesheet.php) 1.2.1 allows remote attackers to exec (no CVSS)
- [CVE-2006-4706](https://cve.now/CVE-2006-4706.md): Cross-site scripting (XSS) vulnerability in inc/functions\_post.php in MyBB (aka MyBulletinBoard) 1.1.7 allows remote attackers to inject arb (no CVSS)
- [CVE-2006-4707](https://cve.now/CVE-2006-4707.md): Cross-site scripting (XSS) vulnerability in admin/global.php (aka the Admin CP login form) in MyBB (aka MyBulletinBoard) 1.1.7 allows remote (no CVSS)
- [CVE-2006-4708](https://cve.now/CVE-2006-4708.md): Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2006-4709](https://cve.now/CVE-2006-4709.md): SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands via the s parameter. (no CVSS)
- [CVE-2006-4710](https://cve.now/CVE-2006-4710.md): Multiple cross-site scripting (XSS) vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2006-4711](https://cve.now/CVE-2006-4711.md): Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 fe (no CVSS)
- [CVE-2006-4712](https://cve.now/CVE-2006-4712.md): Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScri (no CVSS)
- [CVE-2006-4713](https://cve.now/CVE-2006-4713.md): PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2006-4714](https://cve.now/CVE-2006-4714.md): PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when regi (no CVSS)
- [CVE-2006-4715](https://cve.now/CVE-2006-4715.md): SQL injection vulnerability in pdf\_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier allows remote at (no CVSS)
- [CVE-2006-4716](https://cve.now/CVE-2006-4716.md): PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attackers to execute arbitra (no CVSS)
- [CVE-2006-4717](https://cve.now/CVE-2006-4717.md): The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before 1.6. (no CVSS)
- [CVE-2006-4718](https://cve.now/CVE-2006-4718.md): Multiple cross-site scripting (XSS) vulnerabilities in livre\_or.php in KorviBlog 1.3.0 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-4719](https://cve.now/CVE-2006-4719.md): Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register\_globals is enabled, allow remote attackers to execu (no CVSS)
- [CVE-2006-4720](https://cve.now/CVE-2006-4720.md): PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2006-4721](https://cve.now/CVE-2006-4721.md): Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and execute arbitrary lo (no CVSS)
- [CVE-2006-4722](https://cve.now/CVE-2006-4722.md): PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2006-4723](https://cve.now/CVE-2006-4723.md): PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register\_globals and WebAdmin is en (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-09-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.