# CVEs published 2010-08-25 31 CVEs were published on August 25, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2009-4977](https://cve.now/CVE-2009-4977.md): PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arbitrary PHP code via… (no CVSS) - [CVE-2009-4978](https://cve.now/CVE-2009-4978.md): Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2009-4979](https://cve.now/CVE-2009-4979.md): Multiple SQL injection vulnerabilities in search.php in Photokorn Gallery 1.81 and earlier allow remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2009-4980](https://cve.now/CVE-2009-4980.md): Multiple cross-site scripting (XSS) vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inject arbitrary web… (no CVSS) - [CVE-2009-4981](https://cve.now/CVE-2009-4981.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack the authentication… (no CVSS) - [CVE-2009-4982](https://cve.now/CVE-2009-4982.md): SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic\_quotes\_gpc is disabled, allows remote attackers to… (no CVSS) - [CVE-2009-4983](https://cve.now/CVE-2009-4983.md): Multiple cross-site scripting (XSS) vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2009-4984](https://cve.now/CVE-2009-4984.md): Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary… (no CVSS) - [CVE-2009-4985](https://cve.now/CVE-2009-4985.md): SQL injection vulnerability in browse.php in Accessories Me PHP Affiliate Script 1.4 allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2009-4986](https://cve.now/CVE-2009-4986.md): Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magic\_quotes\_gpc is disabled, allows remote attackers to read… (no CVSS) - [CVE-2009-4987](https://cve.now/CVE-2009-4987.md): admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain administrative… (no CVSS) - [CVE-2009-4988](https://cve.now/CVE-2009-4988.md): Stack-based buffer overflow in NT\_Naming\_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute… (no CVSS) - [CVE-2009-4989](https://cve.now/CVE-2009-4989.md): Cross-site scripting (XSS) vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2009-4990](https://cve.now/CVE-2009-4990.md): Cross-site scripting (XSS) vulnerability in the Webform report module 5.x and 6.x for Drupal allows remote attackers to inject arbitrary… (no CVSS) - [CVE-2009-4991](https://cve.now/CVE-2009-4991.md): Cross-site scripting (XSS) vulnerability in users/resume\_register.php in Omnistar Recruiting allows remote attackers to inject arbitrary… (no CVSS) - [CVE-2009-4992](https://cve.now/CVE-2009-4992.md): SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2009-4993](https://cve.now/CVE-2009-4993.md): PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via… (no CVSS) - [CVE-2009-4994](https://cve.now/CVE-2009-4994.md): Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to… (no CVSS) - [CVE-2009-4995](https://cve.now/CVE-2009-4995.md): Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject… (no CVSS) - [CVE-2010-1800](https://cve.now/CVE-2010-1800.md): CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to… (no CVSS) - [CVE-2010-1801](https://cve.now/CVE-2010-1801.md): Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause… (no CVSS) - [CVE-2010-1802](https://cve.now/CVE-2010-1802.md): libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which… (no CVSS) - [CVE-2010-1808](https://cve.now/CVE-2010-1808.md): Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary… (no CVSS) - [CVE-2010-2360](https://cve.now/CVE-2010-2360.md): Multiple buffer overflows in Winny 2.0b7.1 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors, a… (no CVSS) - [CVE-2010-2361](https://cve.now/CVE-2010-2361.md): Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might… (no CVSS) - [CVE-2010-2362](https://cve.now/CVE-2010-2362.md): Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might… (no CVSS) - [CVE-2010-2711](https://cve.now/CVE-2010-2711.md): Unspecified vulnerability in the HP MagCloud app before 1.0.5 for the iPad allows remote attackers to read and modify MagCloud application… (no CVSS) - [CVE-2010-2935](https://cve.now/CVE-2010-2935.md): simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with… (no CVSS) - [CVE-2010-2936](https://cve.now/CVE-2010-2936.md): Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a… (no CVSS) - [CVE-2010-3121](https://cve.now/CVE-2010-3121.md): Buffer overflow in tm-console-bin in the DevonIT thin-client management tool might allow remote attackers to execute arbitrary code via… (no CVSS) - [CVE-2010-3122](https://cve.now/CVE-2010-3122.md): The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2010-08-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.