# CVEs published 2006-03-07

52 CVEs were published on March 7, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1069](https://cve.now/CVE-2006-1069.md): Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and pos (no CVSS)
- [CVE-2006-1065](https://cve.now/CVE-2006-1065.md): SQL injection vulnerability in search.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to execute arbitrary SQL commands via the f (no CVSS)
- [CVE-2006-1067](https://cve.now/CVE-2006-1067.md): Linksys WRT54G routers version 5 (running VXWorks) allow remote attackers to cause a denial of service by sending a malformed DCC SEND strin (no CVSS)
- [CVE-2006-1068](https://cve.now/CVE-2006-1068.md): Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND s (no CVSS)
- [CVE-2005-3629](https://cve.now/CVE-2005-3629.md): initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allow (no CVSS)
- [CVE-2006-1051](https://cve.now/CVE-2006-1051.md): SQL injection vulnerability in Akarru Social BookMarking Engine before 0.4.3.4 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-1062](https://cve.now/CVE-2006-1062.md): Unspecified vulnerability in lurker.cgi for Lurker 2.0 and earlier allows attackers to read arbitrary files via unknown vectors. (no CVSS)
- [CVE-2006-1063](https://cve.now/CVE-2006-1063.md): Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writable directory that is n (no CVSS)
- [CVE-2006-1064](https://cve.now/CVE-2006-1064.md): Multiple cross-site scripting (XSS) vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-1050](https://cve.now/CVE-2006-1050.md): Kwik-Pay Payroll 4.2.20, and possibly other versions, stores the KwikPay.mdb database file with insecure permissions, which allows local use (no CVSS)
- [CVE-2006-0047](https://cve.now/CVE-2006-0047.md): packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted packets with negative (no CVSS)
- [CVE-2006-1031](https://cve.now/CVE-2006-1031.md): config/config\_inc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include arbitrary local files via the SG\_HOME parameter. (no CVSS)
- [CVE-2006-1032](https://cve.now/CVE-2006-1032.md): Eval injection vulnerability in the decode function in rpc\_decoder.php for phpRPC 0.7 and earlier, as used by runcms, exoops, and possibly o (no CVSS)
- [CVE-2006-1033](https://cve.now/CVE-2006-1033.md): Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1034](https://cve.now/CVE-2006-1034.md): Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1035](https://cve.now/CVE-2006-1035.md): Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown a (no CVSS)
- [CVE-2006-1036](https://cve.now/CVE-2006-1036.md): Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "pe (no CVSS)
- [CVE-2006-1037](https://cve.now/CVE-2006-1037.md): SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via u (no CVSS)
- [CVE-2006-1038](https://cve.now/CVE-2006-1038.md): Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unico (no CVSS)
- [CVE-2006-1039](https://cve.now/CVE-2006-1039.md): SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sen (no CVSS)
- [CVE-2006-1040](https://cve.now/CVE-2006-1040.md): Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2006-1041](https://cve.now/CVE-2006-1041.md): Multiple cross-site scripting (XSS) vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-1042](https://cve.now/CVE-2006-1042.md): Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) folder parame (no CVSS)
- [CVE-2006-1043](https://cve.now/CVE-2006-1043.md): Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbit (no CVSS)
- [CVE-2006-1044](https://cve.now/CVE-2006-1044.md): Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface enabled, allow remote a (no CVSS)
- [CVE-2006-1045](https://cve.now/CVE-2006-1045.md): The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly b (no CVSS)
- [CVE-2006-1046](https://cve.now/CVE-2006-1046.md): server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a string containing a large (no CVSS)
- [CVE-2006-1047](https://cve.now/CVE-2006-1047.md): Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and earlier has unknown impact and attack vectors. (no CVSS)
- [CVE-2006-1048](https://cve.now/CVE-2006-1048.md): Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certain attack vectors rel (no CVSS)
- [CVE-2006-1049](https://cve.now/CVE-2006-1049.md): Multiple SQL injection vulnerabilities in the Admin functionality in Joomla! 1.0.7 and earlier allow remote authenticated administrators to (no CVSS)
- [CVE-2006-0554](https://cve.now/CVE-2006-0554.md): Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale (no CVSS)
- [CVE-2006-0555](https://cve.now/CVE-2006-0555.md): The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack vectors related to th (no CVSS)
- [CVE-2006-0741](https://cve.now/CVE-2006-0741.md): Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endless recursive fault") (no CVSS)
- [CVE-2006-0883](https://cve.now/CVE-2006-0883.md): OpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked child process terminates during PAM authentic (no CVSS)
- [CVE-2006-1013](https://cve.now/CVE-2006-1013.md): PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and execute arbitrary PH (no CVSS)
- [CVE-2006-1014](https://cve.now/CVE-2006-1014.md): Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting remote input for the ad (no CVSS)
- [CVE-2006-1015](https://cve.now/CVE-2006-1015.md): Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for (no CVSS)
- [CVE-2006-1016](https://cve.now/CVE-2006-1016.md): Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, (no CVSS)
- [CVE-2006-1017](https://cve.now/CVE-2006-1017.md): The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe\_mode or (2) open\_basedir functi (no CVSS)
- [CVE-2006-1018](https://cve.now/CVE-2006-1018.md): SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2006-1019](https://cve.now/CVE-2006-1019.md): Cross-site scripting (XSS) vulnerability in fce.php in UKiBoard 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a B (no CVSS)
- [CVE-2006-1020](https://cve.now/CVE-2006-1020.md): SQL injection vulnerability in forumlib.php in Johnny\_Vegas Vegas Forum 1.0 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2006-1021](https://cve.now/CVE-2006-1021.md): Cross-site scripting (XSS) vulnerability in sol\_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote (no CVSS)
- [CVE-2006-1022](https://cve.now/CVE-2006-1022.md): PHP remote file include vulnerability in sol\_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote att (no CVSS)
- [CVE-2006-1023](https://cve.now/CVE-2006-1023.md): Directory traversal vulnerability in HP System Management Homepage (SMH) 2.0.0 through 2.1.4 on Windows allows remote attackers to access ce (no CVSS)
- [CVE-2006-1024](https://cve.now/CVE-2006-1024.md): SQL injection vulnerability in MgrLogin.asp in Addsoft StoreBot 2005 Professional allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-1025](https://cve.now/CVE-2006-1025.md): Cross-site scripting (XSS) vulnerability in manage.asp in Addsoft StoreBot 2002 Standard allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-1026](https://cve.now/CVE-2006-1026.md): JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID. (no CVSS)
- [CVE-2006-1027](https://cve.now/CVE-2006-1027.md): feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via a "/" (sl (no CVSS)
- [CVE-2006-1028](https://cve.now/CVE-2006-1028.md): feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to cause a denial of service (stressed file c (no CVSS)
- [CVE-2006-1029](https://cve.now/CVE-2006-1029.md): The cross-site scripting (XSS) countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow remote attackers to cause a denial of service (no CVSS)
- [CVE-2006-1030](https://cve.now/CVE-2006-1030.md): Unspecified vulnerability in mod\_templatechooser in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via an unspecified (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-03-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.