# CVEs published 2006-10-20

35 CVEs were published on October 20, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-5432](https://cve.now/CVE-2006-5432.md): Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when register\_globals is enabled, allow remot (no CVSS)
- [CVE-2006-5433](https://cve.now/CVE-2006-5433.md): PHP remote file inclusion vulnerability in modules/guestbook/index.php in ALiCE-CMS 0.1 allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2006-5434](https://cve.now/CVE-2006-5434.md): PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2006-5435](https://cve.now/CVE-2006-5435.md): PHP remote file inclusion vulnerability in groupcp.php in phpBB 2.0.10 and earlier allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-5436](https://cve.now/CVE-2006-5436.md): PHP remote file inclusion vulnerability in index.php in FreeFAQ 1.0.e allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2006-5437](https://cve.now/CVE-2006-5437.md): Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2006-5438](https://cve.now/CVE-2006-5438.md): PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when register\_globals is enabled, allows remote attackers to e (no CVSS)
- [CVE-2006-5439](https://cve.now/CVE-2006-5439.md): PHP remote file inclusion vulnerability in adminfoot.php in Comdev Misc Tools 4.1, when register\_globals is enabled, allows remote attackers (no CVSS)
- [CVE-2006-5440](https://cve.now/CVE-2006-5440.md): PHP remote file inclusion vulnerability in adminfoot.php in Comdev Form Designer 4.1, when register\_globals is enabled, allows remote attack (no CVSS)
- [CVE-2006-5441](https://cve.now/CVE-2006-5441.md): PHP remote file inclusion vulnerability in adminfoot.php in Comdev Web Blogger 4.1, when register\_globals is enabled, allows remote attacker (no CVSS)
- [CVE-2006-4926](https://cve.now/CVE-2006-4926.md): The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for in Kaspersky Labs Ant (no CVSS)
- [CVE-2006-5423](https://cve.now/CVE-2006-5423.md): PHP remote file inclusion vulnerability in admin/admin\_module.php in Lou Portail 1.4.1, and possibly earlier, allows remote attackers to exe (no CVSS)
- [CVE-2006-5424](https://cve.now/CVE-2006-5424.md): Unspecified vulnerability in Justsystem Ichitaro 2006, 2006 trial version, and Government 2006 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-5425](https://cve.now/CVE-2006-5425.md): XORP (eXtensible Open Router Platform) 1.2 and 1.3 allows remote attackers to cause a denial of service (application crash) via an Open Shor (no CVSS)
- [CVE-2006-5426](https://cve.now/CVE-2006-5426.md): PHP remote file inclusion vulnerability in lib/lcUser.php in LoCal Calendar System 1.1 remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2006-5427](https://cve.now/CVE-2006-5427.md): PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register\_globals is enabled or magic\_quotes\_gpc is disabl (no CVSS)
- [CVE-2006-5428](https://cve.now/CVE-2006-5428.md): rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display\_get\_requesters operation, which allows remote attacke (no CVSS)
- [CVE-2006-5429](https://cve.now/CVE-2006-5429.md): Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2006-5430](https://cve.now/CVE-2006-5430.md): Cross-site scripting (XSS) vulnerability in the search functionality in db-central (dbc) Enterprise CMS and db-central CMS allows remote att (no CVSS)
- [CVE-2006-5431](https://cve.now/CVE-2006-5431.md): PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote attackers to execute a (no CVSS)
- [CVE-2006-5412](https://cve.now/CVE-2006-5412.md): admin.php in PHP Outburst Easynews 4.4.1 and earlier, when register\_globals is enabled, allows remote attackers to bypass authentication, an (no CVSS)
- [CVE-2006-5413](https://cve.now/CVE-2006-5413.md): Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) allow remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2006-5414](https://cve.now/CVE-2006-5414.md): Barry Nauta BRIM before 1.2.1 allows remote authenticated users to read information from other users via a modified URL. (no CVSS)
- [CVE-2006-5415](https://cve.now/CVE-2006-5415.md): PHP remote file inclusion vulnerability in includes/functions\_newshr.php in the News Defilante Horizontale 4.1.1 and earlier module for phpB (no CVSS)
- [CVE-2006-5416](https://cve.now/CVE-2006-5416.md): Cross-site scripting (XSS) vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earlier, allows remote att (no CVSS)
- [CVE-2006-5417](https://cve.now/CVE-2006-5417.md): McAfee Network Agent (mcnasvc.exe) 1.0.178.0, as used by multiple McAfee products possibly including Internet Security Suite, Personal Firew (no CVSS)
- [CVE-2006-5418](https://cve.now/CVE-2006-5418.md): PHP remote file inclusion vulnerability in archive/archive\_topic.php in pbpbb archive for search engines (SearchIndexer) (aka phpBBSEI) for (no CVSS)
- [CVE-2006-5419](https://cve.now/CVE-2006-5419.md): PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when register\_globals is enabl (no CVSS)
- [CVE-2006-5420](https://cve.now/CVE-2006-5420.md): Kerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service (crash) via malformed DNS responses. (no CVSS)
- [CVE-2006-5421](https://cve.now/CVE-2006-5421.md): WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoconfig parameter that (no CVSS)
- [CVE-2006-5422](https://cve.now/CVE-2006-5422.md): PHP remote file inclusion vulnerability in calcul-page.php in Lodel (patchlodel) 0.7.3 allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2006-5408](https://cve.now/CVE-2006-5408.md): Multiple cross-site scripting (XSS) vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall Endpoint 4 (no CVSS)
- [CVE-2006-5409](https://cve.now/CVE-2006-5409.md): Multiple SQL injection vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall Endpoint 4.0.2.11045 al (no CVSS)
- [CVE-2006-5410](https://cve.now/CVE-2006-5410.md): PHP remote file inclusion vulnerability in templates/tmpl\_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arb (no CVSS)
- [CVE-2006-5411](https://cve.now/CVE-2006-5411.md): Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote atta (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-10-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.