# CVEs published 2006-01-26

12 CVEs were published on January 26, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4668](https://cve.now/CVE-2005-4668.md): The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.2\_08, allows local users to execute arbitrary comands (no CVSS)
- [CVE-2005-4669](https://cve.now/CVE-2005-4669.md): SQL injection vulnerability in RT Internet Solutions (RTIS) WebAdmin allows remote attackers to execute arbitrary SQL commands via the (1) u (no CVSS)
- [CVE-2006-0439](https://cve.now/CVE-2006-0439.md): Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote (no CVSS)
- [CVE-2006-0440](https://cve.now/CVE-2006-0440.md): Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of th (no CVSS)
- [CVE-2006-0441](https://cve.now/CVE-2006-0441.md): Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which trigge (no CVSS)
- [CVE-2006-0442](https://cve.now/CVE-2006-0442.md): Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-0443](https://cve.now/CVE-2006-0443.md): Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-0444](https://cve.now/CVE-2006-0444.md): SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2006-0445](https://cve.now/CVE-2006-0445.md): index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to t (no CVSS)
- [CVE-2006-0434](https://cve.now/CVE-2006-0434.md): Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via ".." (dot dot) sequences a (no CVSS)
- [CVE-2006-0435](https://cve.now/CVE-2006-0435.md): Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, (no CVSS)
- [CVE-2006-0436](https://cve.now/CVE-2006-0436.md): Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-01-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.