# CVEs published 2010-03-18 20 CVEs were published on March 18, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2009-4719](https://cve.now/CVE-2009-4719.md): SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more param (no CVSS) - [CVE-2009-4720](https://cve.now/CVE-2009-4720.md): SQL injection vulnerability in cgi-bin/gnudip.cgi in GnuDIP 2.1.1 allows remote attackers to execute arbitrary SQL commands via the username (no CVSS) - [CVE-2009-4721](https://cve.now/CVE-2009-4721.md): Multiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web (A-W) BannerAd 1.0 allow remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2009-4722](https://cve.now/CVE-2009-4722.md): SQL injection vulnerability in the CheckLogin function in includes/functions.php in Limny 1.01, when magic\_quotes\_gpc is disabled, allows re (no CVSS) - [CVE-2009-4723](https://cve.now/CVE-2009-4723.md): Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbitrary local files via (no CVSS) - [CVE-2009-4724](https://cve.now/CVE-2009-4724.md): SQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2009-4725](https://cve.now/CVE-2009-4725.md): Directory traversal vulnerability in modules/aljazeera/admin/setup.php in Arab Portal 2.2 and earlier, when register\_globals is enabled and (no CVSS) - [CVE-2009-4726](https://cve.now/CVE-2009-4726.md): Directory traversal vulnerability in download.php in Quickdev 4 PHP allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2009-4727](https://cve.now/CVE-2009-4727.md): SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2009-4728](https://cve.now/CVE-2009-4728.md): SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute arbitrary SQL comma (no CVSS) - [CVE-2009-4729](https://cve.now/CVE-2009-4729.md): Multiple cross-site scripting (XSS) vulnerabilities in x10 Adult Media Script 1.7 allow remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2009-4730](https://cve.now/CVE-2009-4730.md): SQL injection vulnerability in report.php in x10 Adult Media Script 1.7 allows remote attackers to execute arbitrary SQL commands via the id (no CVSS) - [CVE-2009-4731](https://cve.now/CVE-2009-4731.md): SQL injection vulnerability in photos.php in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allows remote att (no CVSS) - [CVE-2009-4732](https://cve.now/CVE-2009-4732.md): SQL injection vulnerability in tt/index.php in TT Web Site Manager 0.5, when magic\_quotes\_gpc is disabled, allows remote attackers to execut (no CVSS) - [CVE-2009-4733](https://cve.now/CVE-2009-4733.md): SQL injection vulnerability in checkuser.php in SimpleLoginSys 0.5, when magic\_quotes\_gpc is disabled, allows remote attackers to execute ar (no CVSS) - [CVE-2009-4734](https://cve.now/CVE-2009-4734.md): SQL injection vulnerability in login.php in Allomani Movies Library (Movies & Clips) 2.7.0 allows remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2009-4735](https://cve.now/CVE-2009-4735.md): SQL injection vulnerability in login.php in Allomani Audio & Video Library (Songs & Clips version) 2.7.0 allows remote attackers to execute (no CVSS) - [CVE-2009-1299](https://cve.now/CVE-2009-1299.md): The pa\_make\_secure\_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of (no CVSS) - [CVE-2010-0104](https://cve.now/CVE-2010-0104.md): Unspecified vulnerability in the Broadcom Integrated NIC Management Firmware 1.x before 1.40.0.0 and 8.x before 8.08 on the HP Small Form Fa (no CVSS) - [CVE-2010-0421](https://cve.now/CVE-2010-0421.md): Array index error in the hb\_ot\_layout\_build\_glyph\_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-d (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-03-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.