# CVEs published 2010-02-22

16 CVEs were published on February 22, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4650](https://cve.now/CVE-2009-4650.md): SQL injection vulnerability in the Webee Comments (com\_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allows remote attackers to ex (no CVSS)
- [CVE-2009-4651](https://cve.now/CVE-2009-4651.md): Multiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com\_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allow (no CVSS)
- [CVE-2010-0677](https://cve.now/CVE-2010-0677.md): SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2010-0678](https://cve.now/CVE-2010-0678.md): PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when register\_glo (no CVSS)
- [CVE-2010-0679](https://cve.now/CVE-2010-0679.md): Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow (no CVSS)
- [CVE-2010-0680](https://cve.now/CVE-2010-0680.md): Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via direc (no CVSS)
- [CVE-2010-0681](https://cve.now/CVE-2010-0681.md): ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensit (no CVSS)
- [CVE-2009-4649](https://cve.now/CVE-2009-4649.md): Multiple cross-site scripting (XSS) vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2010-0671](https://cve.now/CVE-2010-0671.md): SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL commands via the id parame (no CVSS)
- [CVE-2010-0672](https://cve.now/CVE-2010-0672.md): SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks para (no CVSS)
- [CVE-2010-0673](https://cve.now/CVE-2010-0673.md): SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attack (no CVSS)
- [CVE-2010-0674](https://cve.now/CVE-2010-0674.md): StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (no CVSS)
- [CVE-2010-0675](https://cve.now/CVE-2010-0675.md): Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2010-0676](https://cve.now/CVE-2010-0676.md): Directory traversal vulnerability in index.php in the RWCards (com\_rwcards) component 3.0.18 for Joomla! allows remote attackers to read arb (no CVSS)
- [CVE-2010-0670](https://cve.now/CVE-2010-0670.md): Unspecified vulnerability in the IP-Tech JQuarks (com\_jquarks) Component before 0.2.4 for Joomla! allows attackers to obtain the installatio (no CVSS)
- [CVE-2010-0299](https://cve.now/CVE-2010-0299.md): openSUSE 11.2 installs the devtmpfs root directory with insecure permissions (1777), which allows local users to gain privileges via unspeci (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.