# CVEs published 2006-01-04

24 CVEs were published on January 4, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0082](https://cve.now/CVE-2006-0082.md): Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows… (no CVSS)
- [CVE-2005-4611](https://cve.now/CVE-2005-4611.md): SQL injection vulnerability in search.php in Free ClickBank 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2005-4612](https://cve.now/CVE-2005-4612.md): Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commands via the (1) f parameter… (no CVSS)
- [CVE-2005-4613](https://cve.now/CVE-2005-4613.md): Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified… (no CVSS)
- [CVE-2005-4614](https://cve.now/CVE-2005-4614.md): Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain… (no CVSS)
- [CVE-2005-4615](https://cve.now/CVE-2005-4615.md): SQL injection vulnerability in news.php in DapperDesk 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2005-4616](https://cve.now/CVE-2005-4616.md): SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the include\_file… (no CVSS)
- [CVE-2005-4617](https://cve.now/CVE-2005-4617.md): SQL injection vulnerability in tickets.php in cSupport 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-0078](https://cve.now/CVE-2006-0078.md): Multiple cross-site scripting (XSS) vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2006-0079](https://cve.now/CVE-2006-0079.md): SQL injection vulnerability in auth.php in ScozNet ScozBook BETA 1.1 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-0080](https://cve.now/CVE-2006-0080.md): Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2006-0081](https://cve.now/CVE-2006-0081.md): ialmnt5.sys in the ialmrnt5 display driver in Intel Graphics Accelerator Driver 6.14.10.4308 allows attackers to cause a denial of service… (no CVSS)
- [CVE-2005-4610](https://cve.now/CVE-2005-4610.md): Format string vulnerability in the server for Dopewars before 1.5.12, when running as an NT service, allows remote attackers to execute… (no CVSS)
- [CVE-2006-0074](https://cve.now/CVE-2006-0074.md): SQL injection vulnerability in profile.php in PHPenpals allows remote attackers to execute arbitrary SQL commands via the personalID… (no CVSS)
- [CVE-2006-0075](https://cve.now/CVE-2006-0075.md): Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the… (no CVSS)
- [CVE-2006-0076](https://cve.now/CVE-2006-0076.md): PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the… (no CVSS)
- [CVE-2006-0077](https://cve.now/CVE-2006-0077.md): Off-by-one error in the getfattr function in File::ExtAttr before 0.03 allows attackers to trigger a buffer overflow via unspecified… (no CVSS)
- [CVE-2005-4607](https://cve.now/CVE-2005-4607.md): Cross-site scripting (XSS) vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2005-4608](https://cve.now/CVE-2005-4608.md): SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS)
- [CVE-2005-4609](https://cve.now/CVE-2005-4609.md): index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration… (no CVSS)
- [CVE-2006-0070](https://cve.now/CVE-2006-0070.md): Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via an IMG tag with an unusual encoded Javascript function… (no CVSS)
- [CVE-2006-0071](https://cve.now/CVE-2006-0071.md): The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or… (no CVSS)
- [CVE-2006-0072](https://cve.now/CVE-2006-0072.md): Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. (no CVSS)
- [CVE-2006-0073](https://cve.now/CVE-2006-0073.md): Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-01-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.