# CVEs published 2006-02-13

38 CVEs were published on February 13, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4714](https://cve.now/CVE-2005-4714.md): Format string vulnerability in the vmps\_log function in OpenVMPS (VLAN Management Policy Server) 1.3 allows remote attackers to execute arbi (no CVSS)
- [CVE-2005-4715](https://cve.now/CVE-2005-4715.md): Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic\_quotes\_gpc is disabled, allow remote attackers to execute (no CVSS)
- [CVE-2006-0668](https://cve.now/CVE-2006-0668.md): SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, pos (no CVSS)
- [CVE-2006-0669](https://cve.now/CVE-2006-0669.md): Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the ( (no CVSS)
- [CVE-2006-0670](https://cve.now/CVE-2006-0670.md): Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connect (no CVSS)
- [CVE-2006-0671](https://cve.now/CVE-2006-0671.md): Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service (reboot or sh (no CVSS)
- [CVE-2006-0672](https://cve.now/CVE-2006-0672.md): Unspecified vulnerability in HP PSC 1210 All-in-One Drivers before 1.0.06 has unknown impact and attack vectors. (no CVSS)
- [CVE-2006-0673](https://cve.now/CVE-2006-0673.md): Multiple SQL injection vulnerabilities in cms/index.php in Magic Calendar Lite 1.02, with magic\_quotes\_gpc disabled, allow remote attackers (no CVSS)
- [CVE-2006-0674](https://cve.now/CVE-2006-0674.md): Buffer overflow in the arp command of IBM AIX 5.3 L, 5.3, 5.2.2, 5.2 L, and 5.2 allows local users to cause a denial of service (crash) via (no CVSS)
- [CVE-2006-0675](https://cve.now/CVE-2006-0675.md): Cross-site scripting (XSS) vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-0676](https://cve.now/CVE-2006-0676.md): Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-3623](https://cve.now/CVE-2005-3623.md): nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY\_SATTR privilege before setting access controls (ACL) on files on exported NFS (no CVSS)
- [CVE-2005-4713](https://cve.now/CVE-2005-4713.md): Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to ca (no CVSS)
- [CVE-2006-0046](https://cve.now/CVE-2006-0046.md): squid\_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a (no CVSS)
- [CVE-2006-0056](https://cve.now/CVE-2006-0056.md): Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0. (no CVSS)
- [CVE-2006-0597](https://cve.now/CVE-2006-0597.md): Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of service (application cras (no CVSS)
- [CVE-2006-0598](https://cve.now/CVE-2006-0598.md): Buffer overflow in elogd.c in elog before 2.5.7 r1558-4 allows attackers to execute code via unspecified variables, when writing to the log (no CVSS)
- [CVE-2006-0599](https://cve.now/CVE-2006-0599.md): The (1) elog.c and (2) elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whether or not a username i (no CVSS)
- [CVE-2006-0600](https://cve.now/CVE-2006-0600.md): elog before 2.5.7 r1558-4 allows remote attackers to cause a denial of service (infinite redirection) via a request with the fail parameter (no CVSS)
- [CVE-2006-0647](https://cve.now/CVE-2006-0647.md): LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote attackers to cause a deni (no CVSS)
- [CVE-2006-0648](https://cve.now/CVE-2006-0648.md): Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbitrary files via the (no CVSS)
- [CVE-2006-0649](https://cve.now/CVE-2006-0649.md): Cross-site scripting (XSS) vulnerability in DataparkSearch before 4.37 allows remote attackers to inject arbitrary web script or HTML via un (no CVSS)
- [CVE-2006-0650](https://cve.now/CVE-2006-0650.md): Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3, as used in multiple scripts, allows remote a (no CVSS)
- [CVE-2006-0651](https://cve.now/CVE-2006-0651.md): SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID parameter in the def (no CVSS)
- [CVE-2006-0652](https://cve.now/CVE-2006-0652.md): WHMCompleteSolution (WHMCS) before 2.3 assigns incorrect permissions to "resellers", which allows remote authenticated users to perform priv (no CVSS)
- [CVE-2006-0653](https://cve.now/CVE-2006-0653.md): Multiple SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3 allow remote attackers to execute arbitrary SQL commands via mult (no CVSS)
- [CVE-2006-0654](https://cve.now/CVE-2006-0654.md): check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authen (no CVSS)
- [CVE-2006-0655](https://cve.now/CVE-2006-0655.md): Multiple cross-site scripting (XSS) vulnerabilities in (1) link\_edited.php and (2) link\_added.php in Hinton Design phpht Topsites 1.3 allow (no CVSS)
- [CVE-2006-0656](https://cve.now/CVE-2006-0656.md): Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary (no CVSS)
- [CVE-2006-0657](https://cve.now/CVE-2006-0657.md): Cross-site scripting (XSS) vulnerability in Softcomplex PHP Event Calendar 1.5 allows remote authenticated users to inject arbitrary web scr (no CVSS)
- [CVE-2006-0658](https://cve.now/CVE-2006-0658.md): Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows remote attackers to (no CVSS)
- [CVE-2006-0659](https://cve.now/CVE-2006-0659.md): Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register\_globals and allow\_url\_fopen enabled, allow remote (no CVSS)
- [CVE-2006-0660](https://cve.now/CVE-2006-0660.md): Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an (no CVSS)
- [CVE-2006-0661](https://cve.now/CVE-2006-0661.md): Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2006-0662](https://cve.now/CVE-2006-0662.md): Cross-site scripting (XSS) vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-0663](https://cve.now/CVE-2006-0663.md): Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2006-0664](https://cve.now/CVE-2006-0664.md): Cross-site scripting (XSS) vulnerability in config\_defaults\_inc.php in Mantis before 1.0 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-0665](https://cve.now/CVE-2006-0665.md): Unspecified vulnerability in (1) query\_store.php and (2) manage\_proj\_create.php in Mantis before 1.0.0 has unknown impact and attack vectors (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-02-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.