# CVEs published 2006-01-07

12 CVEs were published on January 7, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4628](https://cve.now/CVE-2005-4628.md): SQL injection vulnerability in index.php in HelpDeskPoint 2.38 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2005-4629](https://cve.now/CVE-2005-4629.md): SQL injection vulnerability in SMBCMS 2.1 allows remote attackers to execute arbitrary SQL commands via unspecified search parameters. (no CVSS)
- [CVE-2005-4630](https://cve.now/CVE-2005-4630.md): SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) billshowid, (no CVSS)
- [CVE-2005-4631](https://cve.now/CVE-2005-4631.md): SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to execute arbitrary SQL commands via the p par (no CVSS)
- [CVE-2005-4632](https://cve.now/CVE-2005-4632.md): SQL injection vulnerability in poll\_frame.php in Vote! Pro 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-0112](https://cve.now/CVE-2006-0112.md): Cross-site scripting (XSS) vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-0113](https://cve.now/CVE-2006-0113.md): Enhanced Simple PHP Gallery 1.7 allows remote attackers to obtain the full path of the application via a direct request to sp\_helper\_functio (no CVSS)
- [CVE-2006-0107](https://cve.now/CVE-2006-0107.md): SQL injection vulnerability in Timecan CMS allows remote attackers to execute arbitrary SQL commands via the viewID parameter. (no CVSS)
- [CVE-2006-0108](https://cve.now/CVE-2006-0108.md): SQL injection vulnerability in mcl\_login.asp in Timecan CMS allows remote attackers to execute arbitrary SQL commands via the email paramete (no CVSS)
- [CVE-2006-0109](https://cve.now/CVE-2006-0109.md): Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-0110](https://cve.now/CVE-2006-0110.md): Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the e (no CVSS)
- [CVE-2006-0111](https://cve.now/CVE-2006-0111.md): Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-01-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.