# CVEs published 2006-10-30

6 CVEs were published on October 30, 2006: 1 critical, 0 high. Days are UTC.

- [CVE-2006-5607](https://cve.now/CVE-2006-5607.md): Directory traversal vulnerability in /cgi-bin/webcm in INCA IM-204 allows remote attackers to read arbitrary files via a "/./." (modified do (no CVSS)
- [CVE-2006-5608](https://cve.now/CVE-2006-5608.md): SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2006-5609](https://cve.now/CVE-2006-5609.md): Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via "\\.\\./" sequences (no CVSS)
- [CVE-2006-5603](https://cve.now/CVE-2006-5603.md): SQL injection vulnerability in pop\_mail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the RC (CVSS 9.8)
- [CVE-2006-5604](https://cve.now/CVE-2006-5604.md): Directory traversal vulnerability in phpcards.header.php in phpCards 1.3 allows remote attackers to include and execute arbitrary local file (no CVSS)
- [CVE-2006-5605](https://cve.now/CVE-2006-5605.md): Multiple cross-site scripting (XSS) vulnerabilities in phpcards.footer.php in phpCards 1.3 allow remote attackers to inject arbitrary web sc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-10-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.