# CVEs published 2006-12-29

28 CVEs were published on December 29, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6825](https://cve.now/CVE-2006-6825.md): Calendar MX BASIC 1.0.2 and earlier store sensitive information under the web root with insufficient access control, which allows remote att (no CVSS)
- [CVE-2006-6826](https://cve.now/CVE-2006-6826.md): Unspecified vulnerability in the tab editor for Personal .NET Portal before 2.0.0 has unknown impact and attack vectors related to a "Securi (no CVSS)
- [CVE-2003-1315](https://cve.now/CVE-2003-1315.md): SQL injection vulnerability in auth.php in Land Down Under (LDU) v601 and earlier allows remote attackers to execute arbitrary SQL commands. (no CVSS)
- [CVE-2004-2667](https://cve.now/CVE-2004-2667.md): Cross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2004-2668](https://cve.now/CVE-2004-2668.md): SQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors. (no CVSS)
- [CVE-2004-2669](https://cve.now/CVE-2004-2669.md): Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the (no CVSS)
- [CVE-2005-4817](https://cve.now/CVE-2005-4817.md): Format string vulnerability in ui.c in Textbased MSN Client (TMSNC) before 0.2.5 allows attackers to cause a denial of service and possibly (no CVSS)
- [CVE-2005-4818](https://cve.now/CVE-2005-4818.md): Multiple SQL injection vulnerabilities in Copernicus Europa allow remote attackers to execute arbitrary SQL commands via unknown vectors. (no CVSS)
- [CVE-2005-4819](https://cve.now/CVE-2005-4819.md): Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0 allows remote attack (no CVSS)
- [CVE-2005-4820](https://cve.now/CVE-2005-4820.md): SMC Wireless Router model SMC7904WBRA allows remote attackers to cause a denial of service (reboot) by flooding the router with traffic. (no CVSS)
- [CVE-2005-4821](https://cve.now/CVE-2005-4821.md): Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2005-4822](https://cve.now/CVE-2005-4822.md): SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source (IOS) version 2.7.2 allows remote attacker (no CVSS)
- [CVE-2006-6809](https://cve.now/CVE-2006-6809.md): Multiple PHP remote file inclusion vulnerabilities in process.php in Vladimir Menshakov buratinable templator (aka bubla) 1.0.0rc2 and earli (no CVSS)
- [CVE-2006-6810](https://cve.now/CVE-2006-6810.md): Unspecified vulnerability in the clear\_user\_list function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2006-6811](https://cve.now/CVE-2006-6811.md): KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Cha (no CVSS)
- [CVE-2006-6812](https://cve.now/CVE-2006-6812.md): Multiple PHP remote file inclusion vulnerabilities in myPHPCalendar 10.1 allow remote attackers to execute arbitrary PHP code via a URL in t (no CVSS)
- [CVE-2006-6813](https://cve.now/CVE-2006-6813.md): SQL injection vulnerability in detail.asp in Mxmania File Upload Manager (FUM) 1.0.6 and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2006-6814](https://cve.now/CVE-2006-6814.md): Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authenticated users to read and (no CVSS)
- [CVE-2006-6815](https://cve.now/CVE-2006-6815.md): Multiple cross-site scripting (XSS) vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote authenticated administrators to inject (no CVSS)
- [CVE-2006-6816](https://cve.now/CVE-2006-6816.md): Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote attackers to execute arbitrary SQL commands via uns (no CVSS)
- [CVE-2006-6817](https://cve.now/CVE-2006-6817.md): AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, which reveals the path (no CVSS)
- [CVE-2006-6818](https://cve.now/CVE-2006-6818.md): AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/c (no CVSS)
- [CVE-2006-6819](https://cve.now/CVE-2006-6819.md): AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attacker (no CVSS)
- [CVE-2006-6820](https://cve.now/CVE-2006-6820.md): myprofile.asp in Enthrallweb eCoupons does not properly validate the MM\_recordId parameter during profile updates, which allows remote authe (no CVSS)
- [CVE-2006-6821](https://cve.now/CVE-2006-6821.md): myprofile.asp in Enthrallweb eNews does not properly validate the MM\_recordId parameter during profile updates, which allows remote authenti (no CVSS)
- [CVE-2006-6822](https://cve.now/CVE-2006-6822.md): myprofile.asp in Enthrallweb eClassifieds does not properly validate the MM\_recordId parameter during profile updates, which allows remote a (no CVSS)
- [CVE-2006-6823](https://cve.now/CVE-2006-6823.md): PHP remote file inclusion vulnerability in plugins/metasearch/plug.inc.php in Yrch! 1.0 allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2006-6824](https://cve.now/CVE-2006-6824.md): Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow remote attackers to i (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-12-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.