# CVEs published 2006-03-01

10 CVEs were published on March 1, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0938](https://cve.now/CVE-2006-0938.md): Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-0939](https://cve.now/CVE-2006-0939.md): SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action param (no CVSS)
- [CVE-2006-0940](https://cve.now/CVE-2006-0940.md): Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2006-0941](https://cve.now/CVE-2006-0941.md): Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-0942](https://cve.now/CVE-2006-0942.md): SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2006-0943](https://cve.now/CVE-2006-0943.md): SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2006-0944](https://cve.now/CVE-2006-0944.md): Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba\_admin cookie to 1. (no CVSS)
- [CVE-2006-0945](https://cve.now/CVE-2006-0945.md): PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute a (no CVSS)
- [CVE-2006-0946](https://cve.now/CVE-2006-0946.md): Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-0947](https://cve.now/CVE-2006-0947.md): Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-03-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.