# CVEs published 2010-03-08

14 CVEs were published on March 8, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4677](https://cve.now/CVE-2009-4677.md): Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2009-4678](https://cve.now/CVE-2009-4678.md): Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2009-4679](https://cve.now/CVE-2009-4679.md): Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com\_if\_nexus) component 1.5 for Joomla! allows remote attackers to (no CVSS)
- [CVE-2010-0936](https://cve.now/CVE-2010-0936.md): Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282\_dlinkA4\_p8\_20071213 allows remote attackers t (no CVSS)
- [CVE-2010-0937](https://cve.now/CVE-2010-0937.md): Multiple unspecified vulnerabilities in Visualization Library before 2009.08.812 have unknown impact and attack vectors. (no CVSS)
- [CVE-2010-0938](https://cve.now/CVE-2010-0938.md): Cross-site scripting (XSS) vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-0939](https://cve.now/CVE-2010-0939.md): Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to do (no CVSS)
- [CVE-2010-0940](https://cve.now/CVE-2010-0940.md): Cross-site scripting (XSS) vulnerability in guestbook.php in Simple PHP Guestbook 1.0 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2010-0941](https://cve.now/CVE-2010-0941.md): Multiple cross-site scripting (XSS) vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2010-0942](https://cve.now/CVE-2010-0942.md): Directory traversal vulnerability in the jVideoDirect (com\_jvideodirect) component for Joomla! allows remote attackers to read arbitrary fil (no CVSS)
- [CVE-2010-0943](https://cve.now/CVE-2010-0943.md): Directory traversal vulnerability in the JA Showcase (com\_jashowcase) component for Joomla! allows remote attackers to read arbitrary files (no CVSS)
- [CVE-2010-0944](https://cve.now/CVE-2010-0944.md): Directory traversal vulnerability in the JCollection (com\_jcollection) component for Joomla! allows remote attackers to read arbitrary files (no CVSS)
- [CVE-2010-0945](https://cve.now/CVE-2010-0945.md): SQL injection vulnerability in the HotBrackets Tournament Brackets (com\_hotbrackets) component for Joomla! allows remote attackers to execut (no CVSS)
- [CVE-2010-0946](https://cve.now/CVE-2010-0946.md): SQL injection vulnerability in the Keep It Simple Stupid (KISS) Software Advertiser (com\_ksadvertiser) component for Joomla! allows remote a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.