# CVEs published 2010-03-15

21 CVEs were published on March 15, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4698](https://cve.now/CVE-2009-4698.md): Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2009-4699](https://cve.now/CVE-2009-4699.md): Multiple cross-site scripting (XSS) vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2009-4700](https://cve.now/CVE-2009-4700.md): Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2009-4701](https://cve.now/CVE-2009-4701.md): SQL injection vulnerability in the Myth download (myth\_download) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2009-4702](https://cve.now/CVE-2009-4702.md): SQL injection vulnerability in the Tour Extension (pm\_tour) extension before 0.0.13 for TYPO3 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2009-4703](https://cve.now/CVE-2009-4703.md): SQL injection vulnerability in the Webesse Image Gallery (ws\_gallery) extension 1.0.4 and earlier for TYPO3 allows remote attackers to… (no CVSS)
- [CVE-2009-4704](https://cve.now/CVE-2009-4704.md): Unspecified vulnerability in the Webesse E-Card (ws\_ecard) extension 1.0.2 and earlier for TYPO3 allows remote attackers to obtain… (no CVSS)
- [CVE-2009-4705](https://cve.now/CVE-2009-4705.md): Cross-site scripting (XSS) vulnerability in the Twitter Search (twittersearch) extension before 0.1.1 for TYPO3 allows remote attackers to… (no CVSS)
- [CVE-2009-4706](https://cve.now/CVE-2009-4706.md): Cross-site scripting (XSS) vulnerability in the Mailform (mailform) extension before 0.9.24 for TYPO3 allows remote attackers to inject… (no CVSS)
- [CVE-2009-4707](https://cve.now/CVE-2009-4707.md): Cross-site scripting (XSS) vulnerability in the \[Gobernalia\] Front End News Submitter (gb\_fenewssubmit) extension 0.1.0 and earlier for… (no CVSS)
- [CVE-2009-4708](https://cve.now/CVE-2009-4708.md): SQL injection vulnerability in the \[Gobernalia\] Front End News Submitter (gb\_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows… (no CVSS)
- [CVE-2009-4709](https://cve.now/CVE-2009-4709.md): SQL injection vulnerability in the datamints Newsticker (datamints\_newsticker) extension before 0.7.2 for TYPO3 allows remote attackers to… (no CVSS)
- [CVE-2009-4710](https://cve.now/CVE-2009-4710.md): SQL injection vulnerability in the Reset backend password (cwt\_resetbepassword) extension 1.20 and earlier for TYPO3 allows remote… (no CVSS)
- [CVE-2009-4711](https://cve.now/CVE-2009-4711.md): SQL injection vulnerability in the CoolURI (cooluri) extension before 1.0.16 for TYPO3 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2009-4712](https://cve.now/CVE-2009-4712.md): SQL injection vulnerability in index.php in Tukanas Classifieds (aka EasyClassifieds) Script 1.0 allows remote attackers to execute… (no CVSS)
- [CVE-2009-4713](https://cve.now/CVE-2009-4713.md): Multiple cross-site scripting (XSS) vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to inject… (no CVSS)
- [CVE-2009-4714](https://cve.now/CVE-2009-4714.md): Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2009-4715](https://cve.now/CVE-2009-4715.md): Cross-site scripting (XSS) vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2009-4716](https://cve.now/CVE-2009-4716.md): Cross-site scripting (XSS) vulnerability in results.php in EDGEPHP EZWebSearch allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2009-4717](https://cve.now/CVE-2009-4717.md): Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2009-4718](https://cve.now/CVE-2009-4718.md): SQL injection vulnerability in visitorduration.php in Gonafish WebStatCaffe allows remote attackers to execute arbitrary SQL commands via… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-03-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.