# CVEs published 2010-03-09

18 CVEs were published on March 9, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0947](https://cve.now/CVE-2010-0947.md): Cross-site scripting (XSS) vulnerability in post.aspx in Max Network Technology BBSMAX 3.0, 4.1, and 4.2 allows remote attackers to inject a (no CVSS)
- [CVE-2010-0948](https://cve.now/CVE-2010-0948.md): SQL injection vulnerability in profil.php in Bigforum 4.5, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2010-0949](https://cve.now/CVE-2010-0949.md): Multiple cross-site scripting (XSS) vulnerabilities in Natychmiast CMS allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2010-0950](https://cve.now/CVE-2010-0950.md): Multiple SQL injection vulnerabilities in Natychmiast CMS allow remote attackers to execute arbitrary SQL commands via the id\_str parameter (no CVSS)
- [CVE-2010-0951](https://cve.now/CVE-2010-0951.md): SQL injection vulnerability in go\_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via the kontent\_id param (no CVSS)
- [CVE-2010-0952](https://cve.now/CVE-2010-0952.md): SQL injection vulnerability in index.php in OneCMS 2.5, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-0953](https://cve.now/CVE-2010-0953.md): Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2010-0954](https://cve.now/CVE-2010-0954.md): SQL injection vulnerability in search\_result.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2010-0955](https://cve.now/CVE-2010-0955.md): SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id pa (no CVSS)
- [CVE-2010-0956](https://cve.now/CVE-2010-0956.md): SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter. (no CVSS)
- [CVE-2010-0957](https://cve.now/CVE-2010-0957.md): Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arb (no CVSS)
- [CVE-2010-0958](https://cve.now/CVE-2010-0958.md): Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic\_quotes\_gpc is disabled, allows re (no CVSS)
- [CVE-2010-0103](https://cve.now/CVE-2010-0103.md): UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the (no CVSS)
- [CVE-2010-0418](https://cve.now/CVE-2010-0418.md): The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitrary commands via shell (no CVSS)
- [CVE-2010-0728](https://cve.now/CVE-2010-0728.md): smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP\_DAC\_OVERRIDE capability, which allows remote authe (no CVSS)
- [CVE-2010-0790](https://cve.now/CVE-2010-0790.md): sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, (no CVSS)
- [CVE-2010-0791](https://cve.now/CVE-2010-0791.md): The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cau (no CVSS)
- [CVE-2010-0926](https://cve.now/CVE-2010-0926.md): The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allow (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.