# CVEs published 2006-01-13

21 CVEs were published on January 13, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4649](https://cve.now/CVE-2005-4649.md): Multiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2006-0196](https://cve.now/CVE-2006-0196.md): Unspecified vulnerability in Serial line sniffer (aka slsnif) 0.4.4 allows local users to gain privileges via a long value of the HOME envir (no CVSS)
- [CVE-2006-0197](https://cve.now/CVE-2006-0197.md): The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses (no CVSS)
- [CVE-2006-0198](https://cve.now/CVE-2006-0198.md): Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2006-0199](https://cve.now/CVE-2006-0199.md): SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-0200](https://cve.now/CVE-2006-0200.md): Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to ex (no CVSS)
- [CVE-2006-0201](https://cve.now/CVE-2006-0201.md): Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to e (no CVSS)
- [CVE-2006-0202](https://cve.now/CVE-2006-0202.md): Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for (no CVSS)
- [CVE-2006-0203](https://cve.now/CVE-2006-0203.md): membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote atta (no CVSS)
- [CVE-2006-0204](https://cve.now/CVE-2006-0204.md): Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) (no CVSS)
- [CVE-2006-0205](https://cve.now/CVE-2006-0205.md): Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass authentica (no CVSS)
- [CVE-2006-0206](https://cve.now/CVE-2006-0206.md): Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2006-0207](https://cve.now/CVE-2006-0207.md): Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cook (no CVSS)
- [CVE-2006-0208](https://cve.now/CVE-2006-0208.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display\_errors and html\_errors are on, allow remote attacke (no CVSS)
- [CVE-2003-1290](https://cve.now/CVE-2003-1290.md): BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain c (no CVSS)
- [CVE-2006-0189](https://cve.now/CVE-2006-0189.md): Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka "a (no CVSS)
- [CVE-2006-0190](https://cve.now/CVE-2006-0190.md): Unspecified vulnerability in Sun Solaris 9 and 10 for the x86 platform allows local users to gain privileges or cause a denial of service (p (no CVSS)
- [CVE-2006-0191](https://cve.now/CVE-2006-0191.md): Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null dereference) via unspecified vectors invol (no CVSS)
- [CVE-2006-0192](https://cve.now/CVE-2006-0192.md): SQL injection vulnerability in Login\_Validate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Passwo (no CVSS)
- [CVE-2006-0193](https://cve.now/CVE-2006-0193.md): Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and ear (no CVSS)
- [CVE-2006-0194](https://cve.now/CVE-2006-0194.md): Cross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remote attackers to injec (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-01-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.