# CVEs published 2006-12-01

41 CVEs were published on December 1, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6197](https://cve.now/CVE-2006-6197.md): Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-6198](https://cve.now/CVE-2006-6198.md): Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitra (no CVSS)
- [CVE-2006-6199](https://cve.now/CVE-2006-6199.md): Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote attackers to execute a (no CVSS)
- [CVE-2006-6200](https://cve.now/CVE-2006-6200.md): Multiple SQL injection vulnerabilities in the (1) rate\_article and (2) rate\_complete functions in modules/News/index.php in the News module (no CVSS)
- [CVE-2006-6201](https://cve.now/CVE-2006-6201.md): Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; (no CVSS)
- [CVE-2006-6202](https://cve.now/CVE-2006-6202.md): PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML ch (no CVSS)
- [CVE-2006-6203](https://cve.now/CVE-2006-6203.md): Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com\_flyspray) component for Mambo allows remote attackers to re (no CVSS)
- [CVE-2006-6204](https://cve.now/CVE-2006-6204.md): Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the (1) cid parame (no CVSS)
- [CVE-2006-6205](https://cve.now/CVE-2006-6205.md): Multiple cross-site scripting (XSS) vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2006-6206](https://cve.now/CVE-2006-6206.md): SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-6207](https://cve.now/CVE-2006-6207.md): SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2006-6208](https://cve.now/CVE-2006-6208.md): Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the (1) AD\_I (no CVSS)
- [CVE-2006-6209](https://cve.now/CVE-2006-6209.md): Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-6210](https://cve.now/CVE-2006-6210.md): SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID paramet (no CVSS)
- [CVE-2006-6211](https://cve.now/CVE-2006-6211.md): Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-6212](https://cve.now/CVE-2006-6212.md): PHP remote file inclusion vulnerability in centre.php in Site News (site\_news) 2.00, and possibly earlier, allows remote attackers to execut (no CVSS)
- [CVE-2006-6213](https://cve.now/CVE-2006-6213.md): index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduct PHP remote file inc (no CVSS)
- [CVE-2006-6214](https://cve.now/CVE-2006-6214.md): SQL injection vulnerability in wallpaper.php in Wallpaper Website (Wallpaper Complete Website) 1.0.09 allows remote attackers to execute arb (no CVSS)
- [CVE-2006-6215](https://cve.now/CVE-2006-6215.md): Multiple SQL injection vulnerabilities in Wallpaper Website (Wallpaper Complete Website) 1.0.09 and earlier allow remote attackers to execut (no CVSS)
- [CVE-2006-6216](https://cve.now/CVE-2006-6216.md): SQL injection vulnerability in admin\_hacks\_list.php in the Nivisec Hacks List 1.21 and earlier phpBB module allows remote attackers to execu (no CVSS)
- [CVE-2006-6217](https://cve.now/CVE-2006-6217.md): PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-6218](https://cve.now/CVE-2006-6218.md): Multiple SQL injection vulnerabilities in index.php in dev4u CMS allow remote attackers to execute arbitrary SQL commands via the (1) seite\_ (no CVSS)
- [CVE-2006-6219](https://cve.now/CVE-2006-6219.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in dev4u CMS allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-6220](https://cve.now/CVE-2006-6220.md): Multiple SQL injection vulnerabilities in Recipes Website (Recipes Complete Website) 1.1.14 allow remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2006-6180](https://cve.now/CVE-2006-6180.md): Cross-site scripting (XSS) vulnerability in articles.asp in Expinion.net iNews Publisher (iNP) 2.5 and earlier allows remote attackers to in (no CVSS)
- [CVE-2006-6181](https://cve.now/CVE-2006-6181.md): Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-6182](https://cve.now/CVE-2006-6182.md): The Gabriele Teotino GNotebook 0.7.0.1 gadget for Google Desktop stores Gmail passwords in plaintext in the %SYSTEMDRIVE%\\temp\\Gnotebook.txt (no CVSS)
- [CVE-2006-6183](https://cve.now/CVE-2006-6183.md): Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (cr (no CVSS)
- [CVE-2006-6184](https://cve.now/CVE-2006-6184.md): Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a d (no CVSS)
- [CVE-2006-6185](https://cve.now/CVE-2006-6185.md): Directory traversal vulnerability in script.php in Wabbit PHP Gallery 0.9 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2006-6186](https://cve.now/CVE-2006-6186.md): Multiple directory traversal vulnerabilities in enomphp 4.0 allow remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2006-6187](https://cve.now/CVE-2006-6187.md): Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the (1) curre (no CVSS)
- [CVE-2006-6188](https://cve.now/CVE-2006-6188.md): Cross-site scripting (XSS) vulnerability in view\_search.asp in ClickTech Click Gallery allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2006-6189](https://cve.now/CVE-2006-6189.md): SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-6190](https://cve.now/CVE-2006-6190.md): SQL injection vulnerability in anna.pl in Anna^ IRC Bot before 0.30 (aka caprice) allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-6191](https://cve.now/CVE-2006-6191.md): SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2006-6192](https://cve.now/CVE-2006-6192.md): Unspecified scripts in the admin directory in 8pixel.net SimpleBlog 3.0 and earlier do not properly perform authentication, which allows rem (no CVSS)
- [CVE-2006-6193](https://cve.now/CVE-2006-6193.md): SQL injection vulnerability in edit.asp in BasicForum 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2006-6194](https://cve.now/CVE-2006-6194.md): Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-6195](https://cve.now/CVE-2006-6195.md): Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2006-6196](https://cve.now/CVE-2006-6196.md): Cross-site scripting (XSS) vulnerability in the search functionality in Fixit iDMS Pro Image Gallery allows remote attackers to inject arbit (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-12-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.