# CVEs published 2010-04-09

18 CVEs were published on April 9, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1335](https://cve.now/CVE-2010-1335.md): Multiple PHP remote file inclusion vulnerabilities in Insky CMS 006-0111, when register\_globals is enabled, allow remote attackers to… (no CVSS)
- [CVE-2010-1336](https://cve.now/CVE-2010-1336.md): Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2)… (no CVSS)
- [CVE-2010-1337](https://cve.now/CVE-2010-1337.md): Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and other versions… (no CVSS)
- [CVE-2010-1338](https://cve.now/CVE-2010-1338.md): SQL injection vulnerability in ts\_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers… (no CVSS)
- [CVE-2010-1339](https://cve.now/CVE-2010-1339.md): Cross-site scripting (XSS) vulnerability in ts\_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows… (no CVSS)
- [CVE-2010-1340](https://cve.now/CVE-2010-1340.md): Directory traversal vulnerability in jresearch.php in the J!Research (com\_jresearch) component for Joomla! allows remote attackers to read… (no CVSS)
- [CVE-2010-1341](https://cve.now/CVE-2010-1341.md): SQL injection vulnerability in index.php in Systemsoftware Community Black Forum allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2010-1342](https://cve.now/CVE-2010-1342.md): Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when register\_globals is enabled, allow remote attackers to… (no CVSS)
- [CVE-2010-1343](https://cve.now/CVE-2010-1343.md): SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid… (no CVSS)
- [CVE-2010-1344](https://cve.now/CVE-2010-1344.md): SQL injection vulnerability in the Cookex Agency CKForms (com\_ckforms) component 1.3.3 for Joomla! allows remote attackers to execute… (no CVSS)
- [CVE-2010-1345](https://cve.now/CVE-2010-1345.md): Directory traversal vulnerability in the Cookex Agency CKForms (com\_ckforms) component 1.3.3 for Joomla! allows remote attackers to read… (no CVSS)
- [CVE-2010-1346](https://cve.now/CVE-2010-1346.md): SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magic\_quotes\_gpc is disabled, allows remote attackers to… (no CVSS)
- [CVE-2010-0992](https://cve.now/CVE-2010-0992.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow… (no CVSS)
- [CVE-2010-0993](https://cve.now/CVE-2010-0993.md): Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote… (no CVSS)
- [CVE-2010-1331](https://cve.now/CVE-2010-1331.md): SQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute arbitrary SQL commands via unknown vectors. (no CVSS)
- [CVE-2010-1332](https://cve.now/CVE-2010-1332.md): Cross-site scripting (XSS) vulnerability in PrettyBook PrettyFormMail allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2010-1333](https://cve.now/CVE-2010-1333.md): Multiple cross-site scripting (XSS) vulnerabilities in Almas Inc. (no CVSS)
- [CVE-2010-1334](https://cve.now/CVE-2010-1334.md): Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users to execute arbitrary code by uploading a… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-04-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.