# CVEs published 2006-09-29 29 CVEs were published on September 29, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-5098](https://cve.now/CVE-2006-5098.md): lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service (CPU consumption) via large w and h p (no CVSS) - [CVE-2006-5099](https://cve.now/CVE-2006-5099.md): lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf\[imconvert\] is configured to use ImageMagick, allows remote attackers to execute (no CVSS) - [CVE-2006-5093](https://cve.now/CVE-2006-5093.md): PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows remote attackers to ex (no CVSS) - [CVE-2006-5094](https://cve.now/CVE-2006-5094.md): PHP remote file inclusion vulnerability in includes/functions\_kb.php in the phpBB XS 2 (Spain version) allows remote attackers to execute ar (no CVSS) - [CVE-2006-5095](https://cve.now/CVE-2006-5095.md): PHP remote file inclusion vulnerability in index.php in MyPhotos 0.1.3b beta allows remote attackers to execute arbitrary PHP code via the i (no CVSS) - [CVE-2006-5096](https://cve.now/CVE-2006-5096.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla! eCommerce Edition C (no CVSS) - [CVE-2006-5097](https://cve.now/CVE-2006-5097.md): PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1 through 0.62, allows remote attackers to execute arbitrary PHP (no CVSS) - [CVE-2006-5087](https://cve.now/CVE-2006-5087.md): Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL i (no CVSS) - [CVE-2006-5088](https://cve.now/CVE-2006-5088.md): PHP remote file inclusion vulnerability in connected\_users.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers to execute arbitrary (no CVSS) - [CVE-2006-5089](https://cve.now/CVE-2006-5089.md): PHP remote file inclusion vulnerability in mybic\_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-5090](https://cve.now/CVE-2006-5090.md): Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2006-5091](https://cve.now/CVE-2006-5091.md): Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server (Samba) allows local users to gain privileges or obtain "unauthorized acc (no CVSS) - [CVE-2006-5092](https://cve.now/CVE-2006-5092.md): PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL i (no CVSS) - [CVE-2006-4247](https://cve.now/CVE-2006-4247.md): Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the pas (no CVSS, plone) - [CVE-2006-4925](https://cve.now/CVE-2006-4925.md): packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUT (no CVSS) - [CVE-2006-5073](https://cve.now/CVE-2006-5073.md): Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets, (no CVSS) - [CVE-2006-5074](https://cve.now/CVE-2006-5074.md): Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS) - [CVE-2006-5075](https://cve.now/CVE-2006-5075.md): The Kernel SSL Proxy service (svc:/network/ssl/proxy) in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service (no CVSS) - [CVE-2006-5076](https://cve.now/CVE-2006-5076.md): Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbitrary PHP code via a (no CVSS) - [CVE-2006-5077](https://cve.now/CVE-2006-5077.md): PHP remote file inclusion vulnerability in admin/admin\_topic\_action\_logging.php in Chris Smith Minerva Build 238 and earlier allows remote a (no CVSS) - [CVE-2006-5078](https://cve.now/CVE-2006-5078.md): PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remote attackers to execu (no CVSS) - [CVE-2006-5079](https://cve.now/CVE-2006-5079.md): PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote attackers to execute (no CVSS) - [CVE-2006-5080](https://cve.now/CVE-2006-5080.md): Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and (no CVSS) - [CVE-2006-5081](https://cve.now/CVE-2006-5081.md): PHP remote file inclusion vulnerability in acc.php in QuickBlogger (QB) 1.4 allows remote attackers to execute arbitrary PHP code via a URL (no CVSS) - [CVE-2006-5082](https://cve.now/CVE-2006-5082.md): Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C (20060917) has unspecified impact, related to code exec (no CVSS) - [CVE-2006-5083](https://cve.now/CVE-2006-5083.md): PHP remote file inclusion vulnerability in includes/functions\_portal.php in Integrated MODs (IM) Portal 1.2.0 and earlier allows remote atta (no CVSS) - [CVE-2006-5084](https://cve.now/CVE-2006-5084.md): Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.\*.79 and earlier allows remote attackers to cause a de (no CVSS) - [CVE-2006-5085](https://cve.now/CVE-2006-5085.md): Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the n (no CVSS) - [CVE-2006-5086](https://cve.now/CVE-2006-5086.md): Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere\_base.p (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-09-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.