CVE-2006-0167

SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter in calendar.php3 and the (2) password field on the login page.

• http://evuln.com/vulns/22/summary.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/18399Vendor Advisory
• http://www.osvdb.org/22324
• http://www.osvdb.org/22325
• http://www.securityfocus.com/archive/1/421863/100/0/threaded
• http://www.securityfocus.com/bid/16210Exploit
• http://www.vupen.com/english/advisories/2006/0147
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24066
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24075
• http://evuln.com/vulns/22/summary.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/18399Vendor Advisory
• http://www.osvdb.org/22324
• http://www.osvdb.org/22325
• http://www.securityfocus.com/archive/1/421863/100/0/threaded
• http://www.securityfocus.com/bid/16210Exploit
• http://www.vupen.com/english/advisories/2006/0147
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24066
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24075

Published

Jan 11, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0161Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has…
• CVE-2006-0162Heap-based buffer overflow in libclamav/upx.c in Clam Antivi…
• CVE-2006-0163SQL injection vulnerability in the search module (modules/Se…
• CVE-2006-0164phgstats.inc.php in phgstats before 0.5.1, if register_globa…
• CVE-2006-0165Cross-site scripting (XSS) vulnerability in the DataForm Ent…
• CVE-2006-0166Symantec Norton SystemWorks and SystemWorks Premier 2005 and…
• CVE-2006-0168Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 al…
• CVE-2006-0169addresses.php3 in MyPhPim 01.05 does not restrict uploaded f…
• CVE-2006-0170Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-0171PHP remote file include vulnerability in index.php in OrjinW…
• CVE-2006-0172Cross-site scripting (XSS) vulnerability in the file manager…
• CVE-2006-0173Hummingbird Collaboration (aka Hummingbird Enterprise Collab…