# CVEs published 2006-04-13

47 CVEs were published on April 13, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1551](https://cve.now/CVE-2006-1551.md): Eval injection vulnerability in pajax\_call\_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via t (no CVSS)
- [CVE-2006-1784](https://cve.now/CVE-2006-1784.md): PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register\_globals is disabled, allows remote (no CVSS)
- [CVE-2006-1785](https://cve.now/CVE-2006-1785.md): Adobe Document Server for Reader Extensions 6.0 allows remote authenticated users to inject arbitrary web script via a leading (1) ftp or (2 (no CVSS)
- [CVE-2006-1786](https://cve.now/CVE-2006-1786.md): Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-1787](https://cve.now/CVE-2006-1787.md): Adobe Document Server for Reader Extensions 6.0 includes a user's session (jsession) ID in the HTTP Referer header, which allows remote atta (no CVSS)
- [CVE-2006-1788](https://cve.now/CVE-2006-1788.md): Adobe Document Server for Reader Extensions 6.0, during log on, provides different error messages depending on whether the user ID is valid (no CVSS)
- [CVE-2006-1789](https://cve.now/CVE-2006-1789.md): Directory traversal vulnerability in pajax\_call\_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to read arbitrary files vi (no CVSS)
- [CVE-2006-1627](https://cve.now/CVE-2006-1627.md): Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform p (no CVSS)
- [CVE-2006-1628](https://cve.now/CVE-2006-1628.md): Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01 allows users to authenticate and perform privileged actions when their accoun (no CVSS)
- [CVE-2004-2656](https://cve.now/CVE-2004-2656.md): Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R\_2\_5\_0\_ (no CVSS)
- [CVE-2005-4773](https://cve.now/CVE-2005-4773.md): The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service (shutdown) via the (1) h (no CVSS)
- [CVE-2005-4774](https://cve.now/CVE-2005-4774.md): Cross-site scripting (XSS) vulnerability in Xerver 4.17 allows remote attackers to inject arbitrary web script or HTML after a /%00/ sequenc (no CVSS)
- [CVE-2005-4775](https://cve.now/CVE-2005-4775.md): Michael Scholz and Sebastian Stein Contineo 2.0, when the admin account lacks an e-mail address attribute, displays the password hash in a w (no CVSS)
- [CVE-2005-4776](https://cve.now/CVE-2005-4776.md): Integer overflow in the FreeBSD compatibility code (freebsd\_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; a (no CVSS)
- [CVE-2005-4777](https://cve.now/CVE-2005-4777.md): Tashcom ASPEdit 2.9 stores the administration password (aka the FTP password) in cleartext in the registry, which might allow local users to (no CVSS)
- [CVE-2005-4778](https://cve.now/CVE-2005-4778.md): The powersave daemon in SUSE Linux 10.0 before 20051007 has an unspecified "configuration problem," which allows local users to suspend the (no CVSS)
- [CVE-2005-4779](https://cve.now/CVE-2005-4779.md): verifiedexecioctl in verified\_exec.c in NetBSD 2.0.2 calls NDINIT with UIO\_USERSPACE rather than UID\_SYSSPACE, which removes the functionali (no CVSS)
- [CVE-2006-1765](https://cve.now/CVE-2006-1765.md): Cross-site scripting (XSS) vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the pa (no CVSS)
- [CVE-2006-1766](https://cve.now/CVE-2006-1766.md): Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-1767](https://cve.now/CVE-2006-1767.md): Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2006-1768](https://cve.now/CVE-2006-1768.md): Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote attackers to inject (no CVSS)
- [CVE-2006-1769](https://cve.now/CVE-2006-1769.md): Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-1770](https://cve.now/CVE-2006-1770.md): Multiple PHP remote file inclusion vulnerabilities in Azerbaijan Design & Development Group (AZDG) AzDGVote allow remote attackers to execut (no CVSS)
- [CVE-2006-1771](https://cve.now/CVE-2006-1771.md): Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote attackers (no CVSS)
- [CVE-2006-1772](https://cve.now/CVE-2006-1772.md): debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat fil (no CVSS)
- [CVE-2006-1773](https://cve.now/CVE-2006-1773.md): SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2006-1774](https://cve.now/CVE-2006-1774.md): HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Cer (no CVSS)
- [CVE-2006-1775](https://cve.now/CVE-2006-1775.md): Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.19 allow remote attackers to inject arbitrary web script or HTML via the (1 (no CVSS)
- [CVE-2006-1776](https://cve.now/CVE-2006-1776.md): PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to execute arb (no CVSS)
- [CVE-2006-1777](https://cve.now/CVE-2006-1777.md): Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execu (no CVSS)
- [CVE-2006-1778](https://cve.now/CVE-2006-1778.md): Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-1779](https://cve.now/CVE-2006-1779.md): Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitra (no CVSS)
- [CVE-2006-1780](https://cve.now/CVE-2006-1780.md): The Bourne shell (sh) in Solaris 8, 9, and 10 allows local users to cause a denial of service (sh crash) via an unspecified attack vector th (no CVSS)
- [CVE-2006-1781](https://cve.now/CVE-2006-1781.md): PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-1782](https://cve.now/CVE-2006-1782.md): Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name (rootDN) passwor (no CVSS)
- [CVE-2006-1783](https://cve.now/CVE-2006-1783.md): Cross-site scripting (XSS) vulnerability in PatroNet CMS allows remote attackers to inject arbitrary web script or HTML via the URI. (no CVSS)
- [CVE-2006-1755](https://cve.now/CVE-2006-1755.md): SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2006-1756](https://cve.now/CVE-2006-1756.md): MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area. (no CVSS)
- [CVE-2006-1757](https://cve.now/CVE-2006-1757.md): Cross-site scripting (XSS) vulnerability in index.php in Vegadns 0.99 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-1758](https://cve.now/CVE-2006-1758.md): SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commands via the cid parameter. (no CVSS)
- [CVE-2006-1759](https://cve.now/CVE-2006-1759.md): Cross-site scripting (XSS) vulnerability in allgemein\_transfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2006-1760](https://cve.now/CVE-2006-1760.md): Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or HTML via the page p (no CVSS)
- [CVE-2006-1761](https://cve.now/CVE-2006-1761.md): Cross-site scripting vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to inject arbitrary web script or HTML via the er (no CVSS)
- [CVE-2006-1762](https://cve.now/CVE-2006-1762.md): Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter (no CVSS)
- [CVE-2006-1763](https://cve.now/CVE-2006-1763.md): Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID (no CVSS)
- [CVE-2006-1764](https://cve.now/CVE-2006-1764.md): Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers (no CVSS)
- [CVE-2006-1754](https://cve.now/CVE-2006-1754.md): SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-04-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.