# CVEs published 2006-11-15 29 CVEs were published on November 15, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-5925](https://cve.now/CVE-2006-5925.md): Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharac (no CVSS) - [CVE-2006-5897](https://cve.now/CVE-2006-5897.md): Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2006-5898](https://cve.now/CVE-2006-5898.md): Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitra (no CVSS) - [CVE-2006-5899](https://cve.now/CVE-2006-5899.md): PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS) - [CVE-2006-5900](https://cve.now/CVE-2006-5900.md): Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/\_files/testRedirections.php sample code in Zend Framework Preview (no CVSS) - [CVE-2006-5901](https://cve.now/CVE-2006-5901.md): Hawking Technology wireless router WR254-CA uses a hardcoded IP address among the set of DNS server IP addresses, which could allow remote a (no CVSS) - [CVE-2006-5902](https://cve.now/CVE-2006-5902.md): viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject li (no CVSS) - [CVE-2006-5903](https://cve.now/CVE-2006-5903.md): Rahul Jonna Gmail File Space (GSpace) allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject (no CVSS) - [CVE-2006-5904](https://cve.now/CVE-2006-5904.md): Multiple PHP remote file inclusion vulnerabilities in MWChat Pro 7.0 allow remote attackers to execute arbitrary PHP code via a URL in the C (no CVSS) - [CVE-2006-5905](https://cve.now/CVE-2006-5905.md): Web Directory Pro allows remote attackers to (1) backup the database and obtain the backup via a direct request to admin/backup\_db.php or (2 (no CVSS) - [CVE-2006-5906](https://cve.now/CVE-2006-5906.md): PHP remote file inclusion vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1 and PLS-Ba (no CVSS) - [CVE-2006-5907](https://cve.now/CVE-2006-5907.md): SQL injection vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1 and PLS-Bannieres 1.21 (no CVSS) - [CVE-2006-5908](https://cve.now/CVE-2006-5908.md): Multiple SQL injection vulnerabilities in the login\_user function in yans.func.php in Lucas Rodriguez San Pedro Yet Another News System (YAN (no CVSS) - [CVE-2006-5909](https://cve.now/CVE-2006-5909.md): generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the admin privilege, which (no CVSS) - [CVE-2006-5910](https://cve.now/CVE-2006-5910.md): Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-5911](https://cve.now/CVE-2006-5911.md): Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code vi (no CVSS) - [CVE-2006-5912](https://cve.now/CVE-2006-5912.md): Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Security fix for you-know-w (no CVSS) - [CVE-2006-5913](https://cve.now/CVE-2006-5913.md): Microsoft Internet Explorer 7 allows remote attackers to (1) cause a security certificate from a secure web site to appear invalid via a lin (no CVSS) - [CVE-2006-5914](https://cve.now/CVE-2006-5914.md): SQL injection vulnerability in ls.php in SAMEDIA LandShop allows remote attackers to execute arbitrary SQL commands via the infield paramete (no CVSS) - [CVE-2006-5915](https://cve.now/CVE-2006-5915.md): Multiple cross-site scripting (XSS) vulnerabilities in ls.php in SAMEDIA LandShop allow remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2006-5916](https://cve.now/CVE-2006-5916.md): Intego VirusBarrier X4 allows context-dependent attackers to bypass virus protection by quickly injecting many infected files into the files (no CVSS) - [CVE-2006-5917](https://cve.now/CVE-2006-5917.md): Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the (1) arti (no CVSS) - [CVE-2006-5918](https://cve.now/CVE-2006-5918.md): Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows remote attackers to upl (no CVSS) - [CVE-2006-5919](https://cve.now/CVE-2006-5919.md): PHP remote file inclusion vulnerability in admin/e\_data/visEdit\_control.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attac (no CVSS) - [CVE-2006-5920](https://cve.now/CVE-2006-5920.md): PHP remote file inclusion vulnerability in common.php in Yuuki Yoshizawa Exporia 0.3.0 allows remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-5921](https://cve.now/CVE-2006-5921.md): Multiple cross-site scripting (XSS) vulnerabilities in add\_comment.php in Wheatblog (wB) allow remote attackers to inject arbitrary web scri (no CVSS) - [CVE-2006-5922](https://cve.now/CVE-2006-5922.md): index.php in Wheatblog (wB) allows remote attackers to obtain sensitive information via certain values of the postPtr\[\] and next parameters, (no CVSS) - [CVE-2006-5923](https://cve.now/CVE-2006-5923.md): PHP remote file inclusion vulnerability in index.php in Chris Mac gtcatalog (aka GimeScripts Shopping Catalog) 0.9.1 and earlier allows remo (no CVSS) - [CVE-2006-5924](https://cve.now/CVE-2006-5924.md): Cross-site scripting (XSS) vulnerability in index.php in Efficient IP iPmanager (IPm) 2.3 allows remote attackers to inject arbitrary web sc (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-11-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.