# CVEs published 2006-03-10 29 CVEs were published on March 10, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-1140](https://cve.now/CVE-2006-1140.md): SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the cat\_id parameter. (no CVSS) - [CVE-2006-1141](https://cve.now/CVE-2006-1141.md): Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a long PATH\_INFO environme (no CVSS) - [CVE-2006-1142](https://cve.now/CVE-2006-1142.md): Unspecified vulnerability in Ravenous Web Server before 0.7.1 allows remote attackers to access arbitrary rvplg files, with unknown impact. (no CVSS) - [CVE-2006-1143](https://cve.now/CVE-2006-1143.md): Cross-site scripting (XSS) vulnerability in FTPoed Blog Engine 1.1 allows remote attackers to inject arbitrary web script or HTML via the co (no CVSS) - [CVE-2006-1144](https://cve.now/CVE-2006-1144.md): Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via (1) the user pa (no CVSS) - [CVE-2006-1145](https://cve.now/CVE-2006-1145.md): Format string vulnerability in the safe\_cprintf function in acebot\_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (pos (no CVSS) - [CVE-2006-1146](https://cve.now/CVE-2006-1146.md): Stack-based buffer overflow in the Cmd\_Say\_f function in g\_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (possibly au (no CVSS) - [CVE-2006-1147](https://cve.now/CVE-2006-1147.md): The Com\_sprintf function in q\_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which al (no CVSS) - [CVE-2006-1148](https://cve.now/CVE-2006-1148.md): Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to exe (no CVSS) - [CVE-2006-1149](https://cve.now/CVE-2006-1149.md): PHP remote file inclusion vulnerability in lib/OWL\_API.php in OWL Intranet Engine 0.82, when register\_globals is enabled, allows remote atta (no CVSS) - [CVE-2006-1150](https://cve.now/CVE-2006-1150.md): Buffer overflow in Tenes Empanadas Graciela (TEG) 0.11.1, automatically appends an \_ (underscore) to the end of duplicate nicknames, which a (no CVSS) - [CVE-2006-1151](https://cve.now/CVE-2006-1151.md): Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go pa (no CVSS) - [CVE-2006-1152](https://cve.now/CVE-2006-1152.md): PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter (no CVSS) - [CVE-2006-1153](https://cve.now/CVE-2006-1153.md): SQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL commands via the load parameter, when perfor (no CVSS) - [CVE-2006-1154](https://cve.now/CVE-2006-1154.md): PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CO (no CVSS) - [CVE-2005-4729](https://cve.now/CVE-2005-4729.md): SQL injection vulnerability in show.php in VBZooM Forum allows remote attackers to execute arbitrary SQL commands via the SubjectID paramete (no CVSS) - [CVE-2006-1129](https://cve.now/CVE-2006-1129.md): SQL injection vulnerability in config.php in EKINboard 1.0.3 allows remote attackers to execute arbitrary SQL commands and bypass authentica (no CVSS) - [CVE-2006-1130](https://cve.now/CVE-2006-1130.md): Cross-site scripting (XSS) vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or HTML via a Javascript (no CVSS) - [CVE-2006-1131](https://cve.now/CVE-2006-1131.md): Cross-site scripting (XSS) vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2006-1132](https://cve.now/CVE-2006-1132.md): SQL injection vulnerability in show.php in vbzoom 1.11 allow remote attackers to execute arbitrary SQL commands via the MainID parameter. (no CVSS) - [CVE-2006-1133](https://cve.now/CVE-2006-1133.md): Multiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to inject arbitrary web script or HTML via the Use (no CVSS) - [CVE-2006-1134](https://cve.now/CVE-2006-1134.md): SQL injection vulnerability in CyBoards PHP Lite 1.25, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary SQL c (no CVSS) - [CVE-2006-1135](https://cve.now/CVE-2006-1135.md): Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS) - [CVE-2006-1136](https://cve.now/CVE-2006-1136.md): Buffer overflow in the PostScript file interpreter code for Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earl (no CVSS) - [CVE-2006-1137](https://cve.now/CVE-2006-1137.md): Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 (no CVSS) - [CVE-2006-1138](https://cve.now/CVE-2006-1138.md): Unspecified vulnerability in the web server code in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or (no CVSS) - [CVE-2006-1139](https://cve.now/CVE-2006-1139.md): Unspecified vulnerability in the ESS/ Network Controller in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earl (no CVSS) - [CVE-2006-0040](https://cve.now/CVE-2006-0040.md): GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a text e-mail with (no CVSS) - [CVE-2006-0667](https://cve.now/CVE-2006-0667.md): lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-03-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.