# CVEs published 2010-02-27

9 CVEs were published on February 27, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0752](https://cve.now/CVE-2010-0752.md): The week\_post\_page function in the Weekly Archive by Node Type module 6.x before 6.x-2.7 for Drupal does not properly implement node access (no CVSS)
- [CVE-2010-0753](https://cve.now/CVE-2010-0753.md): SQL injection vulnerability in the SQL Reports (com\_sqlreport) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2010-0754](https://cve.now/CVE-2010-0754.md): Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inje (no CVSS)
- [CVE-2010-0755](https://cve.now/CVE-2010-0755.md): PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2010-0756](https://cve.now/CVE-2010-0756.md): Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to ( (no CVSS)
- [CVE-2010-0757](https://cve.now/CVE-2010-0757.md): Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code (no CVSS)
- [CVE-2010-0758](https://cve.now/CVE-2010-0758.md): SQL injection vulnerability in news\_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2010-0759](https://cve.now/CVE-2010-0759.md): Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plu (no CVSS)
- [CVE-2010-0760](https://cve.now/CVE-2010-0760.md): Multiple directory traversal vulnerabilities in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allow remote attackers to include and (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
