# CVEs published 2010-06-21 21 CVEs were published on June 21, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-2354](https://cve.now/CVE-2010-2354.md): SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2010-2355](https://cve.now/CVE-2010-2355.md): Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject arbitrary web script… (no CVSS) - [CVE-2010-2356](https://cve.now/CVE-2010-2356.md): Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject arbitrary web… (no CVSS) - [CVE-2010-2357](https://cve.now/CVE-2010-2357.md): SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2010-2358](https://cve.now/CVE-2010-2358.md): PHP remote file inclusion vulnerability in modules/catalog/upload\_photo.php in Nakid CMS 0.5.2, when magic\_quotes\_gpc is disabled and… (no CVSS) - [CVE-2010-2359](https://cve.now/CVE-2010-2359.md): SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arbitrary SQL commands… (no CVSS) - [CVE-2010-1958](https://cve.now/CVE-2010-1958.md): Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote… (no CVSS) - [CVE-2010-2347](https://cve.now/CVE-2010-2347.md): The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 through 7.30 allows… (no CVSS) - [CVE-2010-2348](https://cve.now/CVE-2010-2348.md): Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execute arbitrary code… (no CVSS) - [CVE-2010-2349](https://cve.now/CVE-2010-2349.md): H264WebCam 3.7 allows remote attackers to cause a denial of service (crash) via a long URI in a GET request, which triggers a NULL pointer… (no CVSS) - [CVE-2010-2350](https://cve.now/CVE-2010-2350.md): Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly… (no CVSS) - [CVE-2010-2351](https://cve.now/CVE-2010-2351.md): Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to… (no CVSS) - [CVE-2010-2352](https://cve.now/CVE-2010-2352.md): The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform… (no CVSS) - [CVE-2010-2353](https://cve.now/CVE-2010-2353.md): The Node Reference module in Content Construction Kit (CCK) module 6.x before 6.x-2.7 for Drupal does not perform access checks for the… (no CVSS) - [CVE-2010-0542](https://cve.now/CVE-2010-0542.md): The \_WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of… (no CVSS) - [CVE-2010-1168](https://cve.now/CVE-2010-1168.md): The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo… (no CVSS) - [CVE-2010-1622](https://cve.now/CVE-2010-1622.md): SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute… (no CVSS, org.springframework:spring) - [CVE-2010-2342](https://cve.now/CVE-2010-2342.md): SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute… (no CVSS) - [CVE-2010-2343](https://cve.now/CVE-2010-2343.md): Stack-based buffer overflow in D.R. (no CVSS) - [CVE-2010-2344](https://cve.now/CVE-2010-2344.md): Multiple cross-site scripting (XSS) vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attackers to inject arbitrary web… (no CVSS) - [CVE-2010-2345](https://cve.now/CVE-2010-2345.md): Cross-site request forgery (CSRF) vulnerability in odCMS 1.06, and possibly earlier, allows remote attackers to hijack the authentication… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2010-06-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.