# CVEs published 2006-03-01

10 CVEs were published on March 1, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0938](https://cve.now/CVE-2006-0938.md): Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2006-0939](https://cve.now/CVE-2006-0939.md): SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action… (no CVSS)
- [CVE-2006-0940](https://cve.now/CVE-2006-0940.md): Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-0941](https://cve.now/CVE-2006-0941.md): Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2006-0942](https://cve.now/CVE-2006-0942.md): SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-0943](https://cve.now/CVE-2006-0943.md): SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2006-0944](https://cve.now/CVE-2006-0944.md): Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba\_admin cookie to 1. (no CVSS)
- [CVE-2006-0945](https://cve.now/CVE-2006-0945.md): PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute… (no CVSS)
- [CVE-2006-0946](https://cve.now/CVE-2006-0946.md): Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attackers to inject… (no CVSS)
- [CVE-2006-0947](https://cve.now/CVE-2006-0947.md): Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-03-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.