# CVEs published 2006-10-06 25 CVEs were published on October 6, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-5194](https://cve.now/CVE-2006-5194.md): Cross-site scripting (XSS) vulnerability in index.php in net2ftp 0.93 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS) - [CVE-2006-5195](https://cve.now/CVE-2006-5195.md): Multiple cross-site scripting (XSS) vulnerabilities in Wheatblog 1.0 and 1.1 allow remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2006-5196](https://cve.now/CVE-2006-5196.md): The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (device crash) via a re (no CVSS) - [CVE-2006-5197](https://cve.now/CVE-2006-5197.md): PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a data (no CVSS) - [CVE-2006-5142](https://cve.now/CVE-2006-5142.md): Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via l (no CVSS) - [CVE-2006-5143](https://cve.now/CVE-2006-5143.md): Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r1 (no CVSS) - [CVE-2006-5182](https://cve.now/CVE-2006-5182.md): PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote attackers to execute ar (no CVSS) - [CVE-2006-5183](https://cve.now/CVE-2006-5183.md): Multiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code vi (no CVSS) - [CVE-2006-5184](https://cve.now/CVE-2006-5184.md): SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key par (no CVSS) - [CVE-2006-5185](https://cve.now/CVE-2006-5185.md): Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modif (no CVSS) - [CVE-2006-5186](https://cve.now/CVE-2006-5186.md): PHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when register\_globals is enabled, allows remote (no CVSS) - [CVE-2006-5187](https://cve.now/CVE-2006-5187.md): PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace (BBaCE) 3.5 and earlier allows remote attackers to e (no CVSS) - [CVE-2006-5188](https://cve.now/CVE-2006-5188.md): Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain (no CVSS) - [CVE-2006-5189](https://cve.now/CVE-2006-5189.md): PHP remote file inclusion vulnerability in funzioni/lib/show\_hlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to (no CVSS) - [CVE-2006-5190](https://cve.now/CVE-2006-5190.md): Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary w (no CVSS) - [CVE-2006-5191](https://cve.now/CVE-2006-5191.md): PHP remote file inclusion vulnerability in includes/functions\_static\_topics.php in the Nivisec Static Topics module for phpBB 1.0 and earlie (no CVSS) - [CVE-2006-5192](https://cve.now/CVE-2006-5192.md): PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PH (no CVSS) - [CVE-2006-5193](https://cve.now/CVE-2006-5193.md): PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary (no CVSS) - [CVE-2006-5175](https://cve.now/CVE-2006-5175.md): Cross-site request forgery (CSRF) vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier (no CVSS) - [CVE-2006-5176](https://cve.now/CVE-2006-5176.md): Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code v (no CVSS) - [CVE-2006-5177](https://cve.now/CVE-2006-5177.md): The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitrary code via unspecif (no CVSS) - [CVE-2006-5178](https://cve.now/CVE-2006-5178.md): Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open\_basedir restriction by using a combina (no CVSS) - [CVE-2006-5179](https://cve.now/CVE-2006-5179.md): Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic publ (no CVSS) - [CVE-2006-5180](https://cve.now/CVE-2006-5180.md): PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allow (no CVSS) - [CVE-2006-5181](https://cve.now/CVE-2006-5181.md): Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-10-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.