# CVEs published 2006-09-28 23 CVEs were published on September 28, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-2937](https://cve.now/CVE-2006-2937.md): OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumpti (no CVSS) - [CVE-2006-2940](https://cve.now/CVE-2006-2940.md): OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via p (no CVSS) - [CVE-2006-3738](https://cve.now/CVE-2006-3738.md): Buffer overflow in the SSL\_get\_shared\_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspeci (no CVSS) - [CVE-2006-4343](https://cve.now/CVE-2006-4343.md): The get\_server\_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remo (no CVSS) - [CVE-2006-5053](https://cve.now/CVE-2006-5053.md): PHP remote file inclusion vulnerability in webnews/template.php in Web-News 1.6.3 and earlier allows remote attackers to execute arbitrary P (no CVSS) - [CVE-2006-5054](https://cve.now/CVE-2006-5054.md): SQL injection vulnerability in uye/uye\_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute arbitrary SQL comma (no CVSS) - [CVE-2006-5055](https://cve.now/CVE-2006-5055.md): PHP remote file inclusion vulnerability in admin/testing/tests/0004\_init\_urls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to (no CVSS) - [CVE-2006-5056](https://cve.now/CVE-2006-5056.md): Cross-site scripting (XSS) vulnerability in index.php in Opial Audio/Video Download Management 1.0 allows remote attackers to inject arbitra (no CVSS) - [CVE-2006-5057](https://cve.now/CVE-2006-5057.md): Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2006-5058](https://cve.now/CVE-2006-5058.md): Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call of Duty 2 1.3 and ea (no CVSS) - [CVE-2006-5059](https://cve.now/CVE-2006-5059.md): Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2006-5060](https://cve.now/CVE-2006-5060.md): Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2006-5061](https://cve.now/CVE-2006-5061.md): PHP remote file inclusion vulnerability in mcf.php in Advanced-Clan-Script (AVCX) 3.4 and earlier allows remote attackers to execute arbitra (no CVSS) - [CVE-2006-5062](https://cve.now/CVE-2006-5062.md): PHP remote file inclusion vulnerability in templates/pb/language/lang\_nl.php in PBLang (PBL) 4.66z and earlier allows remote attackers to ex (no CVSS) - [CVE-2006-5063](https://cve.now/CVE-2006-5063.md): Cross-site scripting (XSS) vulnerability in Elog 2.6.1 allows remote attackers to inject arbitrary web script or HTML by editing log entries (no CVSS) - [CVE-2006-5064](https://cve.now/CVE-2006-5064.md): Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-5065](https://cve.now/CVE-2006-5065.md): PHP remote file inclusion vulnerability in libs/dbmax/mysql.php in ZoomStats 1.0.2 and earlier, when register\_globals is enabled, allows rem (no CVSS) - [CVE-2006-5066](https://cve.now/CVE-2006-5066.md): Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote attackers to inject ar (no CVSS) - [CVE-2006-5067](https://cve.now/CVE-2006-5067.md): PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbi (no CVSS) - [CVE-2006-5068](https://cve.now/CVE-2006-5068.md): PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.1 and earlier allows (no CVSS) - [CVE-2006-5069](https://cve.now/CVE-2006-5069.md): Cross-site scripting (XSS) vulnerability in class.tx\_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earl (no CVSS) - [CVE-2006-5070](https://cve.now/CVE-2006-5070.md): PHP remote file inclusion vulnerability in fsl2/objects/fs\_form\_links.php in faceStones Personal 2.0.42 and earlier allows remote attackers (no CVSS) - [CVE-2006-5071](https://cve.now/CVE-2006-5071.md): Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary web script or HTML via (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-09-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.