# CVEs published 2006-10-12 31 CVEs were published on October 12, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-5251](https://cve.now/CVE-2006-5251.md): PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS) - [CVE-2006-5252](https://cve.now/CVE-2006-5252.md): PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHP (no CVSS) - [CVE-2006-5253](https://cve.now/CVE-2006-5253.md): PHP remote file inclusion vulnerability in strload.php in Dayana Networks phpOnline (aka PHP-Online) 2.1 allows remote attackers to execute (no CVSS) - [CVE-2006-5254](https://cve.now/CVE-2006-5254.md): PHP remote file inclusion vulnerability in registration\_detailed.inc.php in Mark Van Bellen Detailed User Registration (com\_registration\_det (no CVSS) - [CVE-2006-5255](https://cve.now/CVE-2006-5255.md): PHP remote file inclusion vulnerability in addnews.php in Greg Neustaetter gCards 1.13 allows remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-5256](https://cve.now/CVE-2006-5256.md): PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execut (no CVSS) - [CVE-2006-5257](https://cve.now/CVE-2006-5257.md): PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System (CMS) 0.9.6b and earlier all (no CVSS) - [CVE-2006-5258](https://cve.now/CVE-2006-5258.md): The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru We (no CVSS) - [CVE-2006-5259](https://cve.now/CVE-2006-5259.md): PHP remote file inclusion vulnerability in param\_editor.php in Compteur 2 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS) - [CVE-2006-5260](https://cve.now/CVE-2006-5260.md): PHP remote file inclusion vulnerability in compteur.php in Compteur 2 allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS) - [CVE-2006-5261](https://cve.now/CVE-2006-5261.md): Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbitrary PHP code via a U (no CVSS) - [CVE-2006-5262](https://cve.now/CVE-2006-5262.md): CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbit (no CVSS) - [CVE-2006-5263](https://cve.now/CVE-2006-5263.md): Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arb (no CVSS) - [CVE-2006-5264](https://cve.now/CVE-2006-5264.md): Cross-site scripting (XSS) vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2006-4813](https://cve.now/CVE-2006-4813.md): The \_\_block\_prepare\_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error (no CVSS) - [CVE-2006-4516](https://cve.now/CVE-2006-4516.md): Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a P (no CVSS) - [CVE-2006-4842](https://cve.now/CVE-2006-4842.md): The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specify (no CVSS) - [CVE-2006-5237](https://cve.now/CVE-2006-5237.md): SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified v (no CVSS) - [CVE-2006-5238](https://cve.now/CVE-2006-5238.md): Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors. (no CVSS) - [CVE-2006-5239](https://cve.now/CVE-2006-5239.md): Multiple cross-site scripting (XSS) vulnerabilities in eXpBlog 0.3.5 and earlier allow remote attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2006-5240](https://cve.now/CVE-2006-5240.md): PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when register\_globals is enabled, allows remote at (no CVSS) - [CVE-2006-5241](https://cve.now/CVE-2006-5241.md): Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when register\_globals is enabled, allow remote (no CVSS) - [CVE-2006-5242](https://cve.now/CVE-2006-5242.md): SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1 allows remote attackers to execute arbitrary SQL comma (no CVSS) - [CVE-2006-5243](https://cve.now/CVE-2006-5243.md): Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when register\_globals is enabled, allow remote atta (no CVSS) - [CVE-2006-5244](https://cve.now/CVE-2006-5244.md): Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when register\_globals is enabled, allow remote att (no CVSS) - [CVE-2006-5245](https://cve.now/CVE-2006-5245.md): Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a direct request for admin/home/index.php, and (no CVSS) - [CVE-2006-5246](https://cve.now/CVE-2006-5246.md): Eazy Cart allows remote attackers to change prices and other critical fields via unspecified vectors to easycart.php, probably including the (no CVSS) - [CVE-2006-5247](https://cve.now/CVE-2006-5247.md): Multiple cross-site scripting (XSS) vulnerabilities in Eazy Cart allow remote attackers to inject arbitrary web script or HTML via easycart. (no CVSS) - [CVE-2006-5248](https://cve.now/CVE-2006-5248.md): Eazy Cart stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a cust (no CVSS) - [CVE-2006-5249](https://cve.now/CVE-2006-5249.md): PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 (tagit2b) allows remote attackers to execu (no CVSS) - [CVE-2006-5250](https://cve.now/CVE-2006-5250.md): PHP remote file inclusion vulnerability in lib/googlesearch/GoogleSearch.php in BlueShoes 4.6\_public and earlier allows remote attackers to (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-10-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.