# CVEs published 2006-11-24 26 CVEs were published on November 24, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-6082](https://cve.now/CVE-2006-6082.md): Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2006-6083](https://cve.now/CVE-2006-6083.md): SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to execute arbitrary SQL commands via the cat (no CVSS) - [CVE-2006-6084](https://cve.now/CVE-2006-6084.md): Directory traversal vulnerability in abitwhizzy.php in aBitWhizzy allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2006-6085](https://cve.now/CVE-2006-6085.md): Kile before 1.9.3 does not assign a backup file the same permissions as the original file, which might allow local users to obtain sensitive (no CVSS) - [CVE-2006-6086](https://cve.now/CVE-2006-6086.md): PHP remote file inclusion vulnerability in src/ark\_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP code via a URL in t (no CVSS) - [CVE-2006-6087](https://cve.now/CVE-2006-6087.md): Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2006-6088](https://cve.now/CVE-2006-6088.md): Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-6089](https://cve.now/CVE-2006-6089.md): Multiple cross-site scripting (XSS) vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2006-6090](https://cve.now/CVE-2006-6090.md): Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via the (1) password parame (no CVSS) - [CVE-2006-6091](https://cve.now/CVE-2006-6091.md): Cross-site scripting (XSS) vulnerability in Grim Pirate GrimBB before 2006\_11\_21 allows remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2006-6092](https://cve.now/CVE-2006-6092.md): Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2006-6093](https://cve.now/CVE-2006-6093.md): Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attackers to execute arbitra (no CVSS) - [CVE-2006-6094](https://cve.now/CVE-2006-6094.md): Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the (1) catID para (no CVSS) - [CVE-2006-6095](https://cve.now/CVE-2006-6095.md): Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the (1) articleID (no CVSS) - [CVE-2006-6096](https://cve.now/CVE-2006-6096.md): Cross-site scripting (XSS) vulnerability in activenews\_search.asp in ActiveNews Manager allows remote attackers to inject arbitrary web scri (no CVSS) - [CVE-2006-6097](https://cve.now/CVE-2006-6097.md): GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contai (no CVSS) - [CVE-2006-6072](https://cve.now/CVE-2006-6072.md): SQL injection vulnerability in bpg/publications\_list.asp in BPG-InfoTech Easy Publisher and Smart Publisher//Pro 2.7.7 allows remote attacke (no CVSS) - [CVE-2006-6073](https://cve.now/CVE-2006-6073.md): Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Pr (no CVSS) - [CVE-2006-6074](https://cve.now/CVE-2006-6074.md): Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the Pr (no CVSS) - [CVE-2006-6075](https://cve.now/CVE-2006-6075.md): Cross-site scripting (XSS) vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2006-6076](https://cve.now/CVE-2006-6076.md): Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows rem (no CVSS) - [CVE-2006-6077](https://cve.now/CVE-2006-6077.md): The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other (no CVSS) - [CVE-2006-6078](https://cve.now/CVE-2006-6078.md): PHP remote file inclusion vulnerability in common.inc.php in a-ConMan 3.2 beta allows remote attackers to execute arbitrary PHP code via a U (no CVSS) - [CVE-2006-6079](https://cve.now/CVE-2006-6079.md): Multiple PHP remote file inclusion vulnerabilities in LoudMouth 2.4 allow remote attackers to execute arbitrary PHP code via a URL in the ma (no CVSS) - [CVE-2006-6080](https://cve.now/CVE-2006-6080.md): Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2006-6081](https://cve.now/CVE-2006-6081.md): PHP remote file inclusion vulnerability in Smarty\_Compiler.class.php in Telaen 1.1.0 and earlier allows remote attackers to execute arbitrar (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-11-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.