# CVEs published 2006-12-11 19 CVEs were published on December 11, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-5871](https://cve.now/CVE-2006-5871.md): smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores certain mount options, wh (no CVSS) - [CVE-2006-6462](https://cve.now/CVE-2006-6462.md): PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to execute arbitrary PHP cod (no CVSS) - [CVE-2006-6463](https://cve.now/CVE-2006-6463.md): Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated users to upload arbitrary .php files, and po (no CVSS) - [CVE-2006-6464](https://cve.now/CVE-2006-6464.md): viewcart in Midicart accepts negative numbers in the Qty (quantity) field, which allows remote attackers to obtain a smaller total price for (no CVSS) - [CVE-2006-6465](https://cve.now/CVE-2006-6465.md): Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local (no CVSS) - [CVE-2006-6466](https://cve.now/CVE-2006-6466.md): Multiple cross-site scripting (XSS) vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier allow remote attackers to inject arbitrary we (no CVSS) - [CVE-2006-6467](https://cve.now/CVE-2006-6467.md): Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not properly restrict (no CVSS) - [CVE-2006-6468](https://cve.now/CVE-2006-6468.md): Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qu (no CVSS) - [CVE-2006-6469](https://cve.now/CVE-2006-6469.md): Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not block the postgres (no CVSS) - [CVE-2006-6470](https://cve.now/CVE-2006-6470.md): The SNMP Agent in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 returns (no CVSS) - [CVE-2006-6471](https://cve.now/CVE-2006-6471.md): Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 use weak permissions for (no CVSS) - [CVE-2006-6472](https://cve.now/CVE-2006-6472.md): The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 co (no CVSS) - [CVE-2006-6473](https://cve.now/CVE-2006-6473.md): Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before (no CVSS) - [CVE-2006-6456](https://cve.now/CVE-2006-6456.md): Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecifie (no CVSS) - [CVE-2006-6457](https://cve.now/CVE-2006-6457.md): tiki-wiki\_rss.php in Tikiwiki 1.9.5, 1.9.2, and possibly other versions allows remote attackers to obtain sensitive information (MySQL usern (no CVSS) - [CVE-2006-6458](https://cve.now/CVE-2006-6458.md): The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security (no CVSS) - [CVE-2006-6459](https://cve.now/CVE-2006-6459.md): Cross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitrary HTML or web scrip (no CVSS) - [CVE-2006-6460](https://cve.now/CVE-2006-6460.md): Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid id parameter to logi (no CVSS) - [CVE-2006-6461](https://cve.now/CVE-2006-6461.md): tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-12-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.