# CVEs published 2010-02-26

23 CVEs were published on February 26, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0720](https://cve.now/CVE-2010-0720.md): SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id paramete (no CVSS)
- [CVE-2010-0721](https://cve.now/CVE-2010-0721.md): SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL commands via the id parame (no CVSS)
- [CVE-2010-0722](https://cve.now/CVE-2010-0722.md): SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2010-0723](https://cve.now/CVE-2010-0723.md): SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id par (no CVSS)
- [CVE-2010-0724](https://cve.now/CVE-2010-0724.md): SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id paramet (no CVSS)
- [CVE-2010-0725](https://cve.now/CVE-2010-0725.md): Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-4886](https://cve.now/CVE-2005-4886.md): The selinux\_parse\_skb\_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allows remote attackers to cause a den (no CVSS)
- [CVE-2010-0667](https://cve.now/CVE-2010-0667.md): MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY\_INTERFACE environment (no CVSS, moin)
- [CVE-2010-0668](https://cve.now/CVE-2010-0668.md): Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, (no CVSS, moin)
- [CVE-2010-0669](https://cve.now/CVE-2010-0669.md): MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors. (no CVSS, moin)
- [CVE-2010-0689](https://cve.now/CVE-2010-0689.md): The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System (aka Grundpaket Basis) allo (no CVSS)
- [CVE-2010-0714](https://cve.now/CVE-2010-0714.md): Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workpla (no CVSS)
- [CVE-2010-0715](https://cve.now/CVE-2010-0715.md): Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Conten (no CVSS)
- [CVE-2010-0716](https://cve.now/CVE-2010-0716.md): \_layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web (no CVSS)
- [CVE-2010-0717](https://cve.now/CVE-2010-0717.md): The default configuration of cfg.packagepages\_actions\_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has u (no CVSS, moin)
- [CVE-2010-0718](https://cve.now/CVE-2010-0718.md): Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of service (divide-by-zero (no CVSS)
- [CVE-2010-0719](https://cve.now/CVE-2010-0719.md): An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not va (no CVSS)
- [CVE-2009-4652](https://cve.now/CVE-2009-4652.md): The (1) Conn\_GetCipherInfo and (2) Conn\_UsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and stan (no CVSS)
- [CVE-2009-4653](https://cve.now/CVE-2009-4653.md): Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to cause a denial (no CVSS)
- [CVE-2009-4654](https://cve.now/CVE-2009-4654.md): Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to execute arbitr (no CVSS)
- [CVE-2009-4655](https://cve.now/CVE-2009-4655.md): The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack ses (no CVSS)
- [CVE-2010-0712](https://cve.now/CVE-2010-0712.md): Multiple SQL injection vulnerabilities in zport/dmd/Events/getJSONEventsInfo in Zenoss 2.3.3, and other versions before 2.5, allow remote au (no CVSS)
- [CVE-2010-0713](https://cve.now/CVE-2010-0713.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss 2.3.3, and other versions before 2.5, allow remote attackers to hijack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.