# CVEs published 2006-04-07

21 CVEs were published on April 7, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4768](https://cve.now/CVE-2005-4768.md): SQL injection vulnerability in manage\_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2005-4769](https://cve.now/CVE-2005-4769.md): SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-4770](https://cve.now/CVE-2005-4770.md): SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product, possibly Accelerated E Solutions, allows remote atta (no CVSS)
- [CVE-2005-4771](https://cve.now/CVE-2005-4771.md): Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication pr (no CVSS)
- [CVE-2005-4772](https://cve.now/CVE-2005-4772.md): liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote reposito (no CVSS)
- [CVE-2006-1657](https://cve.now/CVE-2006-1657.md): Cross-site scripting (XSS) vulnerability in index.php in Chucky A. (no CVSS)
- [CVE-2006-1658](https://cve.now/CVE-2006-1658.md): Direct static code injection vulnerability in ticker.db.php in Chucky A. (no CVSS)
- [CVE-2006-1659](https://cve.now/CVE-2006-1659.md): Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) id para (no CVSS)
- [CVE-2006-1660](https://cve.now/CVE-2006-1660.md): Cross-site scripting (XSS) vulnerability in image\_desc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2006-1661](https://cve.now/CVE-2006-1661.md): Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-1662](https://cve.now/CVE-2006-1662.md): The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the Itemid parameter in (no CVSS)
- [CVE-2006-1664](https://cve.now/CVE-2006-1664.md): Buffer overflow in xine\_list\_delete\_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attacke (no CVSS)
- [CVE-2006-1665](https://cve.now/CVE-2006-1665.md): Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2006-1666](https://cve.now/CVE-2006-1666.md): SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineI (no CVSS)
- [CVE-2006-1667](https://cve.now/CVE-2006-1667.md): SQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earli (no CVSS)
- [CVE-2006-1668](https://cve.now/CVE-2006-1668.md): newimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows remote authenticate (no CVSS)
- [CVE-2006-1669](https://cve.now/CVE-2006-1669.md): SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitra (no CVSS)
- [CVE-2006-1670](https://cve.now/CVE-2006-1670.md): Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of servi (no CVSS)
- [CVE-2006-1671](https://cve.now/CVE-2006-1671.md): Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of servi (no CVSS)
- [CVE-2006-1672](https://cve.now/CVE-2006-1672.md): The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file en (no CVSS)
- [CVE-2006-1673](https://cve.now/CVE-2006-1673.md): Cross-site scripting (XSS) vulnerability in vbugs.php in Dark\_Wizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-04-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.