# CVEs published 2010-03-02

19 CVEs were published on March 2, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0795](https://cve.now/CVE-2010-0795.md): SQL injection vulnerability in the JE Event Calendars (com\_jeeventcalendar) component 1.0 for Joomla! allows remote attackers to execute… (no CVSS)
- [CVE-2010-0796](https://cve.now/CVE-2010-0796.md): SQL injection vulnerability in the JE Quiz (com\_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2010-0797](https://cve.now/CVE-2010-0797.md): Cross-site scripting (XSS) vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2010-0798](https://cve.now/CVE-2010-0798.md): SQL injection vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2010-0799](https://cve.now/CVE-2010-0799.md): Directory traversal vulnerability in misc/tell\_a\_friend/tell.php in phpunity.newsmanager allows remote attackers to read arbitrary files… (no CVSS)
- [CVE-2010-0800](https://cve.now/CVE-2010-0800.md): SQL injection vulnerability in the Ossolution Team Documents Seller (aka DMS) (com\_dms) component 2.5.1 for Joomla! allows remote… (no CVSS)
- [CVE-2010-0801](https://cve.now/CVE-2010-0801.md): Directory traversal vulnerability in the AutartiTarot (com\_autartitarot) component 1.0.3 for Joomla! allows remote authenticated users… (no CVSS)
- [CVE-2010-0802](https://cve.now/CVE-2010-0802.md): SQL injection vulnerability in index.php in (nv2) Awards 1.1.0, a modification for Invision Power Board, allows remote attackers to… (no CVSS)
- [CVE-2010-0803](https://cve.now/CVE-2010-0803.md): SQL injection vulnerability in the jVideoDirect (com\_jvideodirect) component 1.1 RC3b for Joomla! allows remote attackers to execute… (no CVSS)
- [CVE-2010-0804](https://cve.now/CVE-2010-0804.md): Cross-site scripting (XSS) vulnerability in index.php in iBoutique 4.0 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2010-0726](https://cve.now/CVE-2010-0726.md): Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote… (no CVSS)
- [CVE-2010-0761](https://cve.now/CVE-2010-0761.md): SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2010-0762](https://cve.now/CVE-2010-0762.md): SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2010-0763](https://cve.now/CVE-2010-0763.md): SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2010-0764](https://cve.now/CVE-2010-0764.md): SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid… (no CVSS)
- [CVE-2010-0765](https://cve.now/CVE-2010-0765.md): fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download… (no CVSS)
- [CVE-2010-0787](https://cve.now/CVE-2010-0787.md): client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS… (no CVSS)
- [CVE-2010-0788](https://cve.now/CVE-2010-0788.md): ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks… (no CVSS)
- [CVE-2010-0789](https://cve.now/CVE-2010-0789.md): fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-03-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
