# CVEs published 2010-04-09

18 CVEs were published on April 9, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1335](https://cve.now/CVE-2010-1335.md): Multiple PHP remote file inclusion vulnerabilities in Insky CMS 006-0111, when register\_globals is enabled, allow remote attackers to execut (no CVSS)
- [CVE-2010-1336](https://cve.now/CVE-2010-1336.md): Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) newla (no CVSS)
- [CVE-2010-1337](https://cve.now/CVE-2010-1337.md): Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and other versions, allo (no CVSS)
- [CVE-2010-1338](https://cve.now/CVE-2010-1338.md): SQL injection vulnerability in ts\_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to (no CVSS)
- [CVE-2010-1339](https://cve.now/CVE-2010-1339.md): Cross-site scripting (XSS) vulnerability in ts\_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote (no CVSS)
- [CVE-2010-1340](https://cve.now/CVE-2010-1340.md): Directory traversal vulnerability in jresearch.php in the J!Research (com\_jresearch) component for Joomla! allows remote attackers to read a (no CVSS)
- [CVE-2010-1341](https://cve.now/CVE-2010-1341.md): SQL injection vulnerability in index.php in Systemsoftware Community Black Forum allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2010-1342](https://cve.now/CVE-2010-1342.md): Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when register\_globals is enabled, allow remote attackers to execut (no CVSS)
- [CVE-2010-1343](https://cve.now/CVE-2010-1343.md): SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid param (no CVSS)
- [CVE-2010-1344](https://cve.now/CVE-2010-1344.md): SQL injection vulnerability in the Cookex Agency CKForms (com\_ckforms) component 1.3.3 for Joomla! allows remote attackers to execute arbitr (no CVSS)
- [CVE-2010-1345](https://cve.now/CVE-2010-1345.md): Directory traversal vulnerability in the Cookex Agency CKForms (com\_ckforms) component 1.3.3 for Joomla! allows remote attackers to read arb (no CVSS)
- [CVE-2010-1346](https://cve.now/CVE-2010-1346.md): SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magic\_quotes\_gpc is disabled, allows remote attackers to execute (no CVSS)
- [CVE-2010-0992](https://cve.now/CVE-2010-0992.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow re (no CVSS)
- [CVE-2010-0993](https://cve.now/CVE-2010-0993.md): Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated (no CVSS)
- [CVE-2010-1331](https://cve.now/CVE-2010-1331.md): SQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute arbitrary SQL commands via unknown vectors. (no CVSS)
- [CVE-2010-1332](https://cve.now/CVE-2010-1332.md): Cross-site scripting (XSS) vulnerability in PrettyBook PrettyFormMail allows remote attackers to inject arbitrary web script or HTML via uns (no CVSS)
- [CVE-2010-1333](https://cve.now/CVE-2010-1333.md): Multiple cross-site scripting (XSS) vulnerabilities in Almas Inc. (no CVSS)
- [CVE-2010-1334](https://cve.now/CVE-2010-1334.md): Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users to execute arbitrary code by uploading a f (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-04-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.