# CVEs published 2006-02-23

26 CVEs were published on February 23, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0856](https://cve.now/CVE-2006-0856.md): SQL injection vulnerability in login.php in Scriptme SmE GB Host 1.21 allows remote attackers to execute arbitrary SQL commands and bypass… (no CVSS)
- [CVE-2006-0857](https://cve.now/CVE-2006-0857.md): Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web… (no CVSS)
- [CVE-2006-0858](https://cve.now/CVE-2006-0858.md): Unquoted Windows search path vulnerability in (1) snsmcon.exe, (2) the autostartup mechanism, and (3) an unspecified installation… (no CVSS)
- [CVE-2006-0859](https://cve.now/CVE-2006-0859.md): Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guestbook entry via a… (no CVSS)
- [CVE-2006-0860](https://cve.now/CVE-2006-0860.md): Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allow remote attackers… (no CVSS)
- [CVE-2006-0861](https://cve.now/CVE-2006-0861.md): Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of guestbook entries… (no CVSS)
- [CVE-2006-0862](https://cve.now/CVE-2006-0862.md): Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read… (no CVSS)
- [CVE-2006-0863](https://cve.now/CVE-2006-0863.md): InfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive information by specifying a nonexistent server… (no CVSS)
- [CVE-2006-0864](https://cve.now/CVE-2006-0864.md): filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative… (no CVSS)
- [CVE-2006-0865](https://cve.now/CVE-2006-0865.md): PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering many user accounts… (no CVSS)
- [CVE-2006-0866](https://cve.now/CVE-2006-0866.md): PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short… (no CVSS)
- [CVE-2006-0867](https://cve.now/CVE-2006-0867.md): Buffer overflow in certain versions of South River (aka SRT) WebDrive, possibly version 6.08 build 1131 and version 8, allows remote… (no CVSS)
- [CVE-2006-0868](https://cve.now/CVE-2006-0868.md): Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before… (no CVSS, pear/auth)
- [CVE-2006-0869](https://cve.now/CVE-2006-0869.md): Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser… (no CVSS)
- [CVE-2006-0870](https://cve.now/CVE-2006-0870.md): SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-0720](https://cve.now/CVE-2006-0720.md): Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and… (no CVSS)
- [CVE-2006-0855](https://cve.now/CVE-2006-0855.md): Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam… (no CVSS)
- [CVE-2005-3525](https://cve.now/CVE-2005-3525.md): Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows… (no CVSS)
- [CVE-2006-0803](https://cve.now/CVE-2006-0803.md): The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for… (no CVSS)
- [CVE-2006-0812](https://cve.now/CVE-2006-0812.md): The VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6.1.2, does not drop… (no CVSS)
- [CVE-2005-4727](https://cve.now/CVE-2005-4727.md): Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2006-0850](https://cve.now/CVE-2006-0850.md): SQL injection vulnerability in include/includes/user/login.php in ilchClan before 1.05g allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-0851](https://cve.now/CVE-2006-0851.md): SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2006-0852](https://cve.now/CVE-2006-0852.md): Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2006-0853](https://cve.now/CVE-2006-0853.md): Buffer overflow in the IMAP service of TrueNorth Internet Anywhere (IA) eMailserver 5.3.4 allows remote authenticated users to cause a… (no CVSS)
- [CVE-2006-0854](https://cve.now/CVE-2006-0854.md): PHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows remote attackers to include arbitrary… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-02-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.