# CVEs published 2006-04-02

12 CVEs were published on April 2, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1575](https://cve.now/CVE-2006-1575.md): Multiple cross-site scripting (XSS) vulnerabilities in news.php in QLnews 1.2 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-1576](https://cve.now/CVE-2006-1576.md): Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifyi (no CVSS)
- [CVE-2006-1577](https://cve.now/CVE-2006-1577.md): Multiple cross-site scripting (XSS) vulnerabilities in view\_all\_set.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inj (no CVSS)
- [CVE-2006-1578](https://cve.now/CVE-2006-1578.md): Multiple SQL injection vulnerabilities in Keystone Digital Library Suite (DLS) 1.5.4 and earlier allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-1579](https://cve.now/CVE-2006-1579.md): SQL injection vulnerability in topics.php in Dynamic Bulletin Board System (DbbS) 2.0-alpha and earlier allows remote attackers to execute a (no CVSS)
- [CVE-2006-1580](https://cve.now/CVE-2006-1580.md): Multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2006-1581](https://cve.now/CVE-2006-1581.md): Directory traversal vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2006-1582](https://cve.now/CVE-2006-1582.md): Cross-site scripting (XSS) vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-1583](https://cve.now/CVE-2006-1583.md): Cross-site scripting (XSS) vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-1584](https://cve.now/CVE-2006-1584.md): Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1585](https://cve.now/CVE-2006-1585.md): Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via (1) the pc parameter i (no CVSS)
- [CVE-2006-1586](https://cve.now/CVE-2006-1586.md): SQL injection vulnerability in admin\_login.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pas (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-04-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.