# CVEs published 2006-11-16

15 CVEs were published on November 16, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-5926](https://cve.now/CVE-2006-5926.md): Multiple SQL injection vulnerabilities in mail.php in Vallheru before 1.0.7 allow remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-5927](https://cve.now/CVE-2006-5927.md): SQL injection vulnerability in cpLogin.asp in ASP Scripter Easy Portal 1.4 and Live Support 1.3 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-5928](https://cve.now/CVE-2006-5928.md): Multiple PHP remote file inclusion vulnerabilities in Phpjobscheduler 3.0 allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2006-5929](https://cve.now/CVE-2006-5929.md): PHP remote file inclusion vulnerability in firepjs.php in Phpjobscheduler 3.0 allows remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2006-5930](https://cve.now/CVE-2006-5930.md): Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1 and earlier allow remote attack (no CVSS)
- [CVE-2006-5931](https://cve.now/CVE-2006-5931.md): Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1, when register\_globals is enabl (no CVSS)
- [CVE-2006-5932](https://cve.now/CVE-2006-5932.md): Kahua before 0.7, when running multiple applications under a single supervisor, grants application access on the basis of username instead o (no CVSS)
- [CVE-2006-5933](https://cve.now/CVE-2006-5933.md): SQL injection vulnerability in update.asp in UltraSite 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2006-5934](https://cve.now/CVE-2006-5934.md): SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2006-5935](https://cve.now/CVE-2006-5935.md): SQL injection vulnerability in index.php in ShopSystems 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the se (no CVSS)
- [CVE-2006-5936](https://cve.now/CVE-2006-5936.md): SQL injection vulnerability in dept.asp in SiteXpress E-Commerce System allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2006-5937](https://cve.now/CVE-2006-5937.md): Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted (1) CAB or (no CVSS)
- [CVE-2006-5938](https://cve.now/CVE-2006-5938.md): Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors involving an uninitialized variable and a crafted CAB fil (no CVSS)
- [CVE-2006-5939](https://cve.now/CVE-2006-5939.md): Grisoft AVG Anti-Virus before 7.1.407 allows remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers a di (no CVSS)
- [CVE-2006-5940](https://cve.now/CVE-2006-5940.md): Unspecified vulnerability in Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors related to "Integer Issues" (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-11-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.