# CVEs published 2010-03-02

19 CVEs were published on March 2, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0795](https://cve.now/CVE-2010-0795.md): SQL injection vulnerability in the JE Event Calendars (com\_jeeventcalendar) component 1.0 for Joomla! allows remote attackers to execute arb (no CVSS)
- [CVE-2010-0796](https://cve.now/CVE-2010-0796.md): SQL injection vulnerability in the JE Quiz (com\_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2010-0797](https://cve.now/CVE-2010-0797.md): Cross-site scripting (XSS) vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2010-0798](https://cve.now/CVE-2010-0798.md): SQL injection vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-0799](https://cve.now/CVE-2010-0799.md): Directory traversal vulnerability in misc/tell\_a\_friend/tell.php in phpunity.newsmanager allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2010-0800](https://cve.now/CVE-2010-0800.md): SQL injection vulnerability in the Ossolution Team Documents Seller (aka DMS) (com\_dms) component 2.5.1 for Joomla! allows remote attackers (no CVSS)
- [CVE-2010-0801](https://cve.now/CVE-2010-0801.md): Directory traversal vulnerability in the AutartiTarot (com\_autartitarot) component 1.0.3 for Joomla! allows remote authenticated users, with (no CVSS)
- [CVE-2010-0802](https://cve.now/CVE-2010-0802.md): SQL injection vulnerability in index.php in (nv2) Awards 1.1.0, a modification for Invision Power Board, allows remote attackers to execute (no CVSS)
- [CVE-2010-0803](https://cve.now/CVE-2010-0803.md): SQL injection vulnerability in the jVideoDirect (com\_jvideodirect) component 1.1 RC3b for Joomla! allows remote attackers to execute arbitra (no CVSS)
- [CVE-2010-0804](https://cve.now/CVE-2010-0804.md): Cross-site scripting (XSS) vulnerability in index.php in iBoutique 4.0 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2010-0726](https://cve.now/CVE-2010-0726.md): Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attacke (no CVSS)
- [CVE-2010-0761](https://cve.now/CVE-2010-0761.md): SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2010-0762](https://cve.now/CVE-2010-0762.md): SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-0763](https://cve.now/CVE-2010-0763.md): SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2010-0764](https://cve.now/CVE-2010-0764.md): SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter (no CVSS)
- [CVE-2010-0765](https://cve.now/CVE-2010-0765.md): fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a (no CVSS)
- [CVE-2010-0787](https://cve.now/CVE-2010-0787.md): client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share (no CVSS)
- [CVE-2010-0788](https://cve.now/CVE-2010-0788.md): ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks i (no CVSS)
- [CVE-2010-0789](https://cve.now/CVE-2010-0789.md): fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink atta (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.