# CVEs published 2006-01-03

8 CVEs were published on January 3, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0068](https://cve.now/CVE-2006-0068.md): SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) q parameter (no CVSS)
- [CVE-2006-0069](https://cve.now/CVE-2006-0069.md): Cross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2005-4606](https://cve.now/CVE-2005-4606.md): SQL injection vulnerability in check\_user.asp in multiple Web Wiz products including (1) Site News 3.06 and earlier, (2) Journal 1.0 and ear (no CVSS)
- [CVE-2006-0064](https://cve.now/CVE-2006-0064.md): PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-0065](https://cve.now/CVE-2006-0065.md): SQL injection vulnerability in (1) functions.php, (2) functions\_update.php, and (3) functions\_display.php in VEGO Web Forum 1.26 and earlier (no CVSS)
- [CVE-2006-0066](https://cve.now/CVE-2006-0066.md): SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands via the readold param (no CVSS)
- [CVE-2006-0067](https://cve.now/CVE-2006-0067.md): SQL injection vulnerability in login.php in VEGO Links Builder 2.00 and earlier allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2005-4605](https://cve.now/CVE-2005-4605.md): The procfs code (proc\_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspec (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-01-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.