# CVEs published 2010-03-15

21 CVEs were published on March 15, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4698](https://cve.now/CVE-2009-4698.md): Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2009-4699](https://cve.now/CVE-2009-4699.md): Multiple cross-site scripting (XSS) vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2009-4700](https://cve.now/CVE-2009-4700.md): Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2009-4701](https://cve.now/CVE-2009-4701.md): SQL injection vulnerability in the Myth download (myth\_download) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2009-4702](https://cve.now/CVE-2009-4702.md): SQL injection vulnerability in the Tour Extension (pm\_tour) extension before 0.0.13 for TYPO3 allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2009-4703](https://cve.now/CVE-2009-4703.md): SQL injection vulnerability in the Webesse Image Gallery (ws\_gallery) extension 1.0.4 and earlier for TYPO3 allows remote attackers to execu (no CVSS)
- [CVE-2009-4704](https://cve.now/CVE-2009-4704.md): Unspecified vulnerability in the Webesse E-Card (ws\_ecard) extension 1.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive (no CVSS)
- [CVE-2009-4705](https://cve.now/CVE-2009-4705.md): Cross-site scripting (XSS) vulnerability in the Twitter Search (twittersearch) extension before 0.1.1 for TYPO3 allows remote attackers to i (no CVSS)
- [CVE-2009-4706](https://cve.now/CVE-2009-4706.md): Cross-site scripting (XSS) vulnerability in the Mailform (mailform) extension before 0.9.24 for TYPO3 allows remote attackers to inject arbi (no CVSS)
- [CVE-2009-4707](https://cve.now/CVE-2009-4707.md): Cross-site scripting (XSS) vulnerability in the \[Gobernalia\] Front End News Submitter (gb\_fenewssubmit) extension 0.1.0 and earlier for TYPO (no CVSS)
- [CVE-2009-4708](https://cve.now/CVE-2009-4708.md): SQL injection vulnerability in the \[Gobernalia\] Front End News Submitter (gb\_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows remo (no CVSS)
- [CVE-2009-4709](https://cve.now/CVE-2009-4709.md): SQL injection vulnerability in the datamints Newsticker (datamints\_newsticker) extension before 0.7.2 for TYPO3 allows remote attackers to e (no CVSS)
- [CVE-2009-4710](https://cve.now/CVE-2009-4710.md): SQL injection vulnerability in the Reset backend password (cwt\_resetbepassword) extension 1.20 and earlier for TYPO3 allows remote attackers (no CVSS)
- [CVE-2009-4711](https://cve.now/CVE-2009-4711.md): SQL injection vulnerability in the CoolURI (cooluri) extension before 1.0.16 for TYPO3 allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2009-4712](https://cve.now/CVE-2009-4712.md): SQL injection vulnerability in index.php in Tukanas Classifieds (aka EasyClassifieds) Script 1.0 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2009-4713](https://cve.now/CVE-2009-4713.md): Multiple cross-site scripting (XSS) vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2009-4714](https://cve.now/CVE-2009-4714.md): Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2009-4715](https://cve.now/CVE-2009-4715.md): Cross-site scripting (XSS) vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2009-4716](https://cve.now/CVE-2009-4716.md): Cross-site scripting (XSS) vulnerability in results.php in EDGEPHP EZWebSearch allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2009-4717](https://cve.now/CVE-2009-4717.md): Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2009-4718](https://cve.now/CVE-2009-4718.md): SQL injection vulnerability in visitorduration.php in Gonafish WebStatCaffe allows remote attackers to execute arbitrary SQL commands via th (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.