# CVEs published 2006-02-21

21 CVEs were published on February 21, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0821](https://cve.now/CVE-2006-0821.md): SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter. (no CVSS)
- [CVE-2006-0822](https://cve.now/CVE-2006-0822.md): Unspecified vulnerability in EmuLinker Kaillera Server before 0.99.17 allows remote attackers to cause a denial of service (probably resourc (no CVSS)
- [CVE-2006-0823](https://cve.now/CVE-2006-0823.md): Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitra (no CVSS)
- [CVE-2006-0824](https://cve.now/CVE-2006-0824.md): Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers t (no CVSS)
- [CVE-2006-0825](https://cve.now/CVE-2006-0825.md): Multiple unspecified vulnerabilities in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre runn (no CVSS)
- [CVE-2006-0826](https://cve.now/CVE-2006-0826.md): Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running softwar (no CVSS)
- [CVE-2006-0827](https://cve.now/CVE-2006-0827.md): Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre runnin (no CVSS)
- [CVE-2006-0828](https://cve.now/CVE-2006-0828.md): Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running softwar (no CVSS)
- [CVE-2006-0829](https://cve.now/CVE-2006-0829.md): Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer (HT (no CVSS)
- [CVE-2006-0830](https://cve.now/CVE-2006-0830.md): The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute a (no CVSS)
- [CVE-2006-0831](https://cve.now/CVE-2006-0831.md): PHP remote file include vulnerability in index.php in Tasarim Rehberi allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2005-1918](https://cve.now/CVE-2005-1918.md): The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect (no CVSS)
- [CVE-2005-4726](https://cve.now/CVE-2005-4726.md): MUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain sensitive information (privacy leak and search r (no CVSS)
- [CVE-2006-0805](https://cve.now/CVE-2006-0805.md): The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agen (no CVSS)
- [CVE-2006-0806](https://cve.now/CVE-2006-0806.md): Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to in (no CVSS)
- [CVE-2006-0807](https://cve.now/CVE-2006-0807.md): Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted attackers to execute (no CVSS)
- [CVE-2006-0808](https://cve.now/CVE-2006-0808.md): MUTE 0.4 allows remote attackers to cause a denial of service (messages not forwarded) and obtain sensitive information about a target by fi (no CVSS)
- [CVE-2006-0809](https://cve.now/CVE-2006-0809.md): Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) usern paramet (no CVSS)
- [CVE-2006-0810](https://cve.now/CVE-2006-0810.md): Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causi (no CVSS)
- [CVE-2006-0811](https://cve.now/CVE-2006-0811.md): Cross-site scripting (XSS) vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2006-0804](https://cve.now/CVE-2006-0804.md): Off-by-one error in TIN 1.8.0 and earlier might allow attackers to execute arbitrary code via unknown vectors that trigger a buffer overflow (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-02-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.