CVEs published October 30, 2006
6 CVEs were published on October 30, 2006: 1 critical, 0 high.
- Published
- 6
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 0
Critical 1
Medium, low and unrated 5
- CVE-2006-5607Directory traversal vulnerability in /cgi-bin/webcm in INCA IM-204 allows remote attackers to read arbitrary files via a "/./." (modified do
- CVE-2006-5608SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL co
- CVE-2006-5609Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via "\.\./" sequences
- CVE-2006-5604Directory traversal vulnerability in phpcards.header.php in phpCards 1.3 allows remote attackers to include and execute arbitrary local file
- CVE-2006-5605Multiple cross-site scripting (XSS) vulnerabilities in phpcards.footer.php in phpCards 1.3 allow remote attackers to inject arbitrary web sc