# CVEs published 2015-01-03

9 CVEs were published on January 3, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9464](https://cve.now/CVE-2014-9464.md): SQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2010-5314](https://cve.now/CVE-2010-5314.md): Cross-site scripting (XSS) vulnerability in controllers/home\_controller.php in BEdita before 3.1 allows remote attackers to inject… (no CVSS)
- [CVE-2010-5315](https://cve.now/CVE-2010-5315.md): Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of… (no CVSS)
- [CVE-2010-5316](https://cve.now/CVE-2010-5316.md): Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2010-5317](https://cve.now/CVE-2010-5317.md): Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2010-5318](https://cve.now/CVE-2010-5318.md): The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password… (no CVSS)
- [CVE-2010-5319](https://cve.now/CVE-2010-5319.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Kandidat CMS 1.4.2 allow remote attackers to hijack the authentication of… (no CVSS)
- [CVE-2010-5320](https://cve.now/CVE-2010-5320.md): Multiple cross-site request forgery (CSRF) vulnerabilities in MemHT Portal 4.0.1 allow remote attackers to hijack the authentication of… (no CVSS)
- [CVE-2014-9427](https://cve.now/CVE-2014-9427.md): sapi/cgi/cgi\_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-01-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.