# CVEs published 2006-10-26

43 CVEs were published on October 26, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-5526](https://cve.now/CVE-2006-5526.md): Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40 and earlier, (no CVSS)
- [CVE-2006-5527](https://cve.now/CVE-2006-5527.md): PHP remote file inclusion vulnerability in lib.editor.inc.php in Intelimen InteliEditor 1.2.x allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-5528](https://cve.now/CVE-2006-5528.md): Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute arbitrary local file (no CVSS)
- [CVE-2006-5529](https://cve.now/CVE-2006-5529.md): Cross-site scripting (XSS) vulnerability in smumdadotcom\_ascyb\_alumni/mod.php in SchoolAlumni Portal 2.26 allows remote attackers to inject (no CVSS)
- [CVE-2006-5530](https://cve.now/CVE-2006-5530.md): Multiple cross-site scripting (XSS) vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-5531](https://cve.now/CVE-2006-5531.md): PHP remote file inclusion vulnerability in embedded.php in Ascended Guestbook 1.0.0 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-5532](https://cve.now/CVE-2006-5532.md): Cross-site scripting (XSS) vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-5533](https://cve.now/CVE-2006-5533.md): Multiple PHP remote file inclusion vulnerabilities in AROUNDMe 0.6.9, and possibly earlier, when register\_globals is enabled, allow remote a (no CVSS)
- [CVE-2006-5534](https://cve.now/CVE-2006-5534.md): Multiple cross-site scripting (XSS) vulnerabilities in index.htm in Zwahlen Online Shop Freeware 5.2.2.50, and possibly earlier, allow remot (no CVSS)
- [CVE-2006-5535](https://cve.now/CVE-2006-5535.md): Multiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 allow remote attackers to inject arbitr (no CVSS)
- [CVE-2006-5536](https://cve.now/CVE-2006-5536.md): Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arb (no CVSS)
- [CVE-2006-5537](https://cve.now/CVE-2006-5537.md): Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote atta (no CVSS)
- [CVE-2006-5538](https://cve.now/CVE-2006-5538.md): D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the cgi-bin directory via unspecified vectors (no CVSS)
- [CVE-2006-5539](https://cve.now/CVE-2006-5539.md): PHP remote file inclusion vulnerability in login/secure.php in UeberProject Management System 1.0 and earlier allows remote attackers to exe (no CVSS)
- [CVE-2006-5540](https://cve.now/CVE-2006-5540.md): backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via (no CVSS)
- [CVE-2006-5541](https://cve.now/CVE-2006-5541.md): backend/parser/parse\_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated use (no CVSS)
- [CVE-2006-5542](https://cve.now/CVE-2006-5542.md): backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) relat (no CVSS)
- [CVE-2006-5543](https://cve.now/CVE-2006-5543.md): PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database (PGOSD), when register\_globals is enab (no CVSS)
- [CVE-2006-5544](https://cve.now/CVE-2006-5544.md): Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phish (no CVSS)
- [CVE-2006-5545](https://cve.now/CVE-2006-5545.md): Premium Antispam in Symantec Mail Security for Domino Server 5.1.x before 5.1.2.28 does not filter certain SMTP address formats, which allow (no CVSS)
- [CVE-2006-5546](https://cve.now/CVE-2006-5546.md): PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.3.0 through 1.4.1 all (no CVSS)
- [CVE-2006-5547](https://cve.now/CVE-2006-5547.md): PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.0.0 through 1.0.3 all (no CVSS)
- [CVE-2006-5548](https://cve.now/CVE-2006-5548.md): PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 2.0.0 through 2.1.3 all (no CVSS)
- [CVE-2006-5549](https://cve.now/CVE-2006-5549.md): PHP remote file inclusion vulnerability in libraries/amfphp/amf-core/custom/CachedGateway.php in Adobe PHP SDK allows remote attackers to ex (no CVSS)
- [CVE-2006-5550](https://cve.now/CVE-2006-5550.md): The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors involving certain ioctl re (no CVSS)
- [CVE-2006-5551](https://cve.now/CVE-2006-5551.md): Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a long argument to the RC (no CVSS)
- [CVE-2006-5552](https://cve.now/CVE-2006-5552.md): Multiple heap-based buffer overflows in RevilloC MailServer 1.21 and earlier allow remote attackers to cause a denial of service (CPU consum (no CVSS)
- [CVE-2006-5553](https://cve.now/CVE-2006-5553.md): Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUCM) and Unified Presen (no CVSS)
- [CVE-2006-5554](https://cve.now/CVE-2006-5554.md): Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary local files via a .. (no CVSS)
- [CVE-2006-5555](https://cve.now/CVE-2006-5555.md): PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2006-5513](https://cve.now/CVE-2006-5513.md): SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a (no CVSS)
- [CVE-2006-5514](https://cve.now/CVE-2006-5514.md): SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attackers to execute arbit (no CVSS)
- [CVE-2006-5515](https://cve.now/CVE-2006-5515.md): Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remote attackers to inject (no CVSS)
- [CVE-2006-5516](https://cve.now/CVE-2006-5516.md): Multiple cross-site scripting (XSS) vulnerabilities in actions/usersettings.php in WikiNi before 0.4.4 allow remote attackers to inject arbi (no CVSS)
- [CVE-2006-5517](https://cve.now/CVE-2006-5517.md): Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote attackers to execute (no CVSS)
- [CVE-2006-5518](https://cve.now/CVE-2006-5518.md): Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-5519](https://cve.now/CVE-2006-5519.md): PHP remote file inclusion vulnerability in Savant2/Savant2\_Plugin\_options.php in the MambWeather 1.8.1 and earlier component for Mambo allow (no CVSS)
- [CVE-2006-5520](https://cve.now/CVE-2006-5520.md): PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PH (no CVSS)
- [CVE-2006-5521](https://cve.now/CVE-2006-5521.md): PHP remote file inclusion vulnerability in DNS/RR.php in Net\_DNS 0.03 and earlier allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-5522](https://cve.now/CVE-2006-5522.md): Multiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2006-5523](https://cve.now/CVE-2006-5523.md): PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2006-5524](https://cve.now/CVE-2006-5524.md): Cross-site scripting (XSS) vulnerability in index.php in phplist 2.10.2 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2006-5525](https://cve.now/CVE-2006-5525.md): Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL injection attacks via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-10-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.