# CVEs published 2006-01-26

12 CVEs were published on January 26, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4668](https://cve.now/CVE-2005-4668.md): The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.2\_08, allows local users to execute arbitrary… (no CVSS)
- [CVE-2005-4669](https://cve.now/CVE-2005-4669.md): SQL injection vulnerability in RT Internet Solutions (RTIS) WebAdmin allows remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS)
- [CVE-2006-0439](https://cve.now/CVE-2006-0439.md): Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows… (no CVSS)
- [CVE-2006-0440](https://cve.now/CVE-2006-0440.md): Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of… (no CVSS)
- [CVE-2006-0441](https://cve.now/CVE-2006-0441.md): Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which… (no CVSS)
- [CVE-2006-0442](https://cve.now/CVE-2006-0442.md): Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject… (no CVSS)
- [CVE-2006-0443](https://cve.now/CVE-2006-0443.md): Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2006-0444](https://cve.now/CVE-2006-0444.md): SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2006-0445](https://cve.now/CVE-2006-0445.md): index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to… (no CVSS)
- [CVE-2006-0434](https://cve.now/CVE-2006-0434.md): Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via ".." (dot dot) sequences… (no CVSS)
- [CVE-2006-0435](https://cve.now/CVE-2006-0435.md): Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2… (no CVSS)
- [CVE-2006-0436](https://cve.now/CVE-2006-0436.md): Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-01-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.