# CVEs published 2006-01-13

21 CVEs were published on January 13, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4649](https://cve.now/CVE-2005-4649.md): Multiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-0196](https://cve.now/CVE-2006-0196.md): Unspecified vulnerability in Serial line sniffer (aka slsnif) 0.4.4 allows local users to gain privileges via a long value of the HOME… (no CVSS)
- [CVE-2006-0197](https://cve.now/CVE-2006-0197.md): The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib… (no CVSS)
- [CVE-2006-0198](https://cve.now/CVE-2006-0198.md): Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2006-0199](https://cve.now/CVE-2006-0199.md): SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-0200](https://cve.now/CVE-2006-0200.md): Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to… (no CVSS)
- [CVE-2006-0201](https://cve.now/CVE-2006-0201.md): Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to… (no CVSS)
- [CVE-2006-0202](https://cve.now/CVE-2006-0202.md): Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions… (no CVSS)
- [CVE-2006-0203](https://cve.now/CVE-2006-0203.md): membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote… (no CVSS)
- [CVE-2006-0204](https://cve.now/CVE-2006-0204.md): Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2006-0205](https://cve.now/CVE-2006-0205.md): Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass… (no CVSS)
- [CVE-2006-0206](https://cve.now/CVE-2006-0206.md): Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2006-0207](https://cve.now/CVE-2006-0207.md): Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted… (no CVSS)
- [CVE-2006-0208](https://cve.now/CVE-2006-0208.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display\_errors and html\_errors are on, allow remote… (no CVSS)
- [CVE-2003-1290](https://cve.now/CVE-2003-1290.md): BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain… (no CVSS)
- [CVE-2006-0189](https://cve.now/CVE-2006-0189.md): Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka… (no CVSS)
- [CVE-2006-0190](https://cve.now/CVE-2006-0190.md): Unspecified vulnerability in Sun Solaris 9 and 10 for the x86 platform allows local users to gain privileges or cause a denial of service… (no CVSS)
- [CVE-2006-0191](https://cve.now/CVE-2006-0191.md): Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null dereference) via unspecified vectors… (no CVSS)
- [CVE-2006-0192](https://cve.now/CVE-2006-0192.md): SQL injection vulnerability in Login\_Validate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-0193](https://cve.now/CVE-2006-0193.md): Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and… (no CVSS)
- [CVE-2006-0194](https://cve.now/CVE-2006-0194.md): Cross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remote attackers to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-01-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.