# CVEs published 2010-03-23 31 CVEs were published on March 23, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-1075](https://cve.now/CVE-2010-1075.md): SQL injection vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to execute arbitrary SQL commands via the subj (no CVSS) - [CVE-2010-1076](https://cve.now/CVE-2010-1076.md): Cross-site scripting (XSS) vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2010-1077](https://cve.now/CVE-2010-1077.md): Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers to include and execu (no CVSS) - [CVE-2010-1078](https://cve.now/CVE-2010-1078.md): SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbitrary SQL commands vi (no CVSS) - [CVE-2010-1079](https://cve.now/CVE-2010-1079.md): Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspeci (no CVSS) - [CVE-2010-1080](https://cve.now/CVE-2010-1080.md): Cross-site scripting (XSS) vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS) - [CVE-2010-1081](https://cve.now/CVE-2010-1081.md): Directory traversal vulnerability in the Community Polls (com\_communitypolls) component 1.5.2, and possibly earlier, for Core Joomla! allows (no CVSS) - [CVE-2010-1082](https://cve.now/CVE-2010-1082.md): Multiple directory traversal vulnerabilities in OI.Blogs 1.0.0, when magic\_quotes\_gpc is disabled, allow remote attackers to read arbitrary (no CVSS) - [CVE-2009-4736](https://cve.now/CVE-2009-4736.md): Cross-site scripting (XSS) vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2010-1040](https://cve.now/CVE-2010-1040.md): The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 through 3.4, when mobile (no CVSS) - [CVE-2010-1064](https://cve.now/CVE-2010-1064.md): Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows remote attackers to down (no CVSS) - [CVE-2010-1065](https://cve.now/CVE-2010-1065.md): Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote (no CVSS) - [CVE-2010-1066](https://cve.now/CVE-2010-1066.md): AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, which allows remote atta (no CVSS) - [CVE-2010-1067](https://cve.now/CVE-2010-1067.md): E-membres 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a (no CVSS) - [CVE-2010-1068](https://cve.now/CVE-2010-1068.md): Multiple cross-site scripting (XSS) vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6 allow remote attackers to inject arbitrary w (no CVSS) - [CVE-2010-1069](https://cve.now/CVE-2010-1069.md): SQL injection vulnerability in games/game.php in ProArcadeScript allows remote attackers to execute arbitrary SQL commands via the id parame (no CVSS) - [CVE-2010-1070](https://cve.now/CVE-2010-1070.md): SQL injection vulnerability in index.php in ImagoScripts Deviant Art Clone allows remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2010-1071](https://cve.now/CVE-2010-1071.md): SQL injection vulnerability in profil.php in phpMDJ 1.0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS) - [CVE-2010-1072](https://cve.now/CVE-2010-1072.md): Cross-site scripting (XSS) vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2010-1073](https://cve.now/CVE-2010-1073.md): SQL injection vulnerability in the jEmbed-Embed Anything (com\_jembed) component for Joomla! allows remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2010-1074](https://cve.now/CVE-2010-1074.md): Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2 for Drupal allows remote attackers to inject arbitra (no CVSS) - [CVE-2010-1054](https://cve.now/CVE-2010-1054.md): Multiple SQL injection vulnerabilities in ParsCMS allow remote attackers to execute arbitrary SQL commands via the RP parameter to (1) fa\_de (no CVSS) - [CVE-2010-1055](https://cve.now/CVE-2010-1055.md): Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magic\_quotes\_gpc is disabled and register\_globals is enab (no CVSS) - [CVE-2010-1056](https://cve.now/CVE-2010-1056.md): Directory traversal vulnerability in the RokDownloads (com\_rokdownloads) component before 1.0.1 for Joomla! allows remote attackers to inclu (no CVSS) - [CVE-2010-1057](https://cve.now/CVE-2010-1057.md): Multiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script) 1.01, when magic\_quotes\_gpc is disabled, allow remote (no CVSS) - [CVE-2010-1058](https://cve.now/CVE-2010-1058.md): Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic\_quotes\_gpc is disabled, allo (no CVSS) - [CVE-2010-1059](https://cve.now/CVE-2010-1059.md): Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09, when magic\_quotes\_gpc is disabled, allows (no CVSS) - [CVE-2010-1060](https://cve.now/CVE-2010-1060.md): Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic\_quotes\_gpc is disabled, allows remote at (no CVSS) - [CVE-2010-1061](https://cve.now/CVE-2010-1061.md): Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magic\_quotes\_gpc is disabled, allow remote attackers to include (no CVSS) - [CVE-2010-1062](https://cve.now/CVE-2010-1062.md): Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magic\_quotes\_gpc is disa (no CVSS) - [CVE-2010-1063](https://cve.now/CVE-2010-1063.md): Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magic\_quotes\_gpc is disabled, allow remote (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-03-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.