# CVEs published 2006-10-13

11 CVEs were published on October 13, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-5287](https://cve.now/CVE-2006-5287.md): Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL commands via (1) the User (no CVSS)
- [CVE-2006-5288](https://cve.now/CVE-2006-5288.md): Cisco 2700 Series Wireless Location Appliances before 2.1.34.0 have a default administrator username "root" and password "password," which a (no CVSS)
- [CVE-2006-5289](https://cve.now/CVE-2006-5289.md): Multiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2006-5290](https://cve.now/CVE-2006-5290.md): The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 all (no CVSS)
- [CVE-2006-5280](https://cve.now/CVE-2006-5280.md): PHP remote file inclusion vulnerability in includes/import-archive.php in Leicestershire communityPortals 1.0 build 20051018 and earlier all (no CVSS)
- [CVE-2006-5281](https://cve.now/CVE-2006-5281.md): PHP remote file inclusion vulnerability in naboard\_pnr.php in n@board 3.1.9e and earlier allows remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2006-5282](https://cve.now/CVE-2006-5282.md): Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2006-5283](https://cve.now/CVE-2006-5283.md): PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the m (no CVSS)
- [CVE-2006-5284](https://cve.now/CVE-2006-5284.md): PHP remote file inclusion vulnerability in auth/phpbb.inc.php in Shen Cheng-Da PHP News Reader (aka pnews) 2.6.4 and earlier allows remote a (no CVSS)
- [CVE-2006-5285](https://cve.now/CVE-2006-5285.md): SQL injection vulnerability in index.php in XeoPort 0.81, and possibly earlier, allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2006-5286](https://cve.now/CVE-2006-5286.md): Unspecified vulnerability in IKE.NLM in Novell BorderManager 3.8 allows attackers to cause a denial of service (crash) via unknown attack ve (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.