# CVEs published 2006-01-04

24 CVEs were published on January 4, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0082](https://cve.now/CVE-2006-0082.md): Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows use (no CVSS)
- [CVE-2005-4611](https://cve.now/CVE-2005-4611.md): SQL injection vulnerability in search.php in Free ClickBank 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2005-4612](https://cve.now/CVE-2005-4612.md): Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commands via the (1) f parameter to (no CVSS)
- [CVE-2005-4613](https://cve.now/CVE-2005-4613.md): Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified fi (no CVSS)
- [CVE-2005-4614](https://cve.now/CVE-2005-4614.md): Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain the (no CVSS)
- [CVE-2005-4615](https://cve.now/CVE-2005-4615.md): SQL injection vulnerability in news.php in DapperDesk 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the pa (no CVSS)
- [CVE-2005-4616](https://cve.now/CVE-2005-4616.md): SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the include\_file par (no CVSS)
- [CVE-2005-4617](https://cve.now/CVE-2005-4617.md): SQL injection vulnerability in tickets.php in cSupport 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pg (no CVSS)
- [CVE-2006-0078](https://cve.now/CVE-2006-0078.md): Multiple cross-site scripting (XSS) vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-0079](https://cve.now/CVE-2006-0079.md): SQL injection vulnerability in auth.php in ScozNet ScozBook BETA 1.1 allows remote attackers to execute arbitrary SQL commands via the usern (no CVSS)
- [CVE-2006-0080](https://cve.now/CVE-2006-0080.md): Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-0081](https://cve.now/CVE-2006-0081.md): ialmnt5.sys in the ialmrnt5 display driver in Intel Graphics Accelerator Driver 6.14.10.4308 allows attackers to cause a denial of service ( (no CVSS)
- [CVE-2005-4610](https://cve.now/CVE-2005-4610.md): Format string vulnerability in the server for Dopewars before 1.5.12, when running as an NT service, allows remote attackers to execute arbi (no CVSS)
- [CVE-2006-0074](https://cve.now/CVE-2006-0074.md): SQL injection vulnerability in profile.php in PHPenpals allows remote attackers to execute arbitrary SQL commands via the personalID paramet (no CVSS)
- [CVE-2006-0075](https://cve.now/CVE-2006-0075.md): Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail (no CVSS)
- [CVE-2006-0076](https://cve.now/CVE-2006-0076.md): PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc (no CVSS)
- [CVE-2006-0077](https://cve.now/CVE-2006-0077.md): Off-by-one error in the getfattr function in File::ExtAttr before 0.03 allows attackers to trigger a buffer overflow via unspecified attack (no CVSS)
- [CVE-2005-4607](https://cve.now/CVE-2005-4607.md): Cross-site scripting (XSS) vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-4608](https://cve.now/CVE-2005-4608.md): SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the (1) devWherePair (no CVSS)
- [CVE-2005-4609](https://cve.now/CVE-2005-4609.md): index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration vi (no CVSS)
- [CVE-2006-0070](https://cve.now/CVE-2006-0070.md): Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via an IMG tag with an unusual encoded Javascript function name (no CVSS)
- [CVE-2006-0071](https://cve.now/CVE-2006-0071.md): The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrit (no CVSS)
- [CVE-2006-0072](https://cve.now/CVE-2006-0072.md): Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. (no CVSS)
- [CVE-2006-0073](https://cve.now/CVE-2006-0073.md): Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject arbi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-01-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.