# CVEs published 2010-05-25

21 CVEs were published on May 25, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2078](https://cve.now/CVE-2010-2078.md): DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI. (no CVSS)
- [CVE-2010-2079](https://cve.now/CVE-2010-2079.md): DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file extensions, and read arbitrary files, via a trailing ba (no CVSS)
- [CVE-2010-2044](https://cve.now/CVE-2010-2044.md): SQL injection vulnerability in the Konsultasi (com\_konsultasi) component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-2045](https://cve.now/CVE-2010-2045.md): Directory traversal vulnerability in the Dione Form Wizard (aka FDione or com\_dioneformwizard) component 1.0.2 for Joomla! allows remote att (no CVSS)
- [CVE-2010-2046](https://cve.now/CVE-2010-2046.md): Multiple cross-site scripting (XSS) vulnerabilities in the ActiveHelper LiveHelp (com\_activehelper\_livehelp) component 2.0.3 for Joomla! all (no CVSS)
- [CVE-2010-2047](https://cve.now/CVE-2010-2047.md): SQL injection vulnerability in index.php in JE CMS 1.0.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the categoryi (no CVSS)
- [CVE-2010-2048](https://cve.now/CVE-2010-2048.md): Multiple cross-site scripting (XSS) vulnerabilities in the Heartbeat module 6.x before 6.x-4.9 for Drupal allow remote authenticated users t (no CVSS)
- [CVE-2010-2049](https://cve.now/CVE-2010-2049.md): Cross-site scripting (XSS) vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine ADAudit Plus 4.0.0 build 4043 allows remote a (no CVSS)
- [CVE-2010-2050](https://cve.now/CVE-2010-2050.md): Directory traversal vulnerability in the Moron Solutions MS Comment (com\_mscomment) component 0.8.0b for Joomla! allows remote attackers to (no CVSS)
- [CVE-2010-2051](https://cve.now/CVE-2010-2051.md): SQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute arbitrary SQL commands via the id paramete (no CVSS)
- [CVE-2010-2033](https://cve.now/CVE-2010-2033.md): Directory traversal vulnerability in the Percha Multicategory Article (com\_perchacategoriestree) component 0.6 for Joomla! allows remote att (no CVSS)
- [CVE-2010-2034](https://cve.now/CVE-2010-2034.md): Directory traversal vulnerability in the Percha Image Attach (com\_perchaimageattach) component 1.1 for Joomla! allows remote attackers to re (no CVSS)
- [CVE-2010-2035](https://cve.now/CVE-2010-2035.md): Directory traversal vulnerability in the Percha Gallery (com\_perchagallery) component 1.6 Beta for Joomla! allows remote attackers to read a (no CVSS)
- [CVE-2010-2036](https://cve.now/CVE-2010-2036.md): Directory traversal vulnerability in the Percha Fields Attach (com\_perchafieldsattach) component 1.x for Joomla! allows remote attackers to (no CVSS)
- [CVE-2010-2037](https://cve.now/CVE-2010-2037.md): Directory traversal vulnerability in the Percha Downloads Attach (com\_perchadownloadsattach) component 1.1 for Joomla! allows remote attacke (no CVSS)
- [CVE-2010-2038](https://cve.now/CVE-2010-2038.md): Cross-site scripting (XSS) vulnerability in include/tool/editing\_files.php in gpEasy CMS 1.6.2 allows remote authenticated users, with Edit (no CVSS)
- [CVE-2010-2039](https://cve.now/CVE-2010-2039.md): Cross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows remote attackers to hijack the authentication (no CVSS)
- [CVE-2010-2040](https://cve.now/CVE-2010-2040.md): Cross-site scripting (XSS) vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2010-2041](https://cve.now/CVE-2010-2041.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-2042](https://cve.now/CVE-2010-2042.md): SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via the encode parameter (no CVSS)
- [CVE-2010-2043](https://cve.now/CVE-2010-2043.md): Cross-site scripting (XSS) vulnerability in Home.aspx in DataTrack System 3.5 and 3.5.8019.4 allows remote attackers to inject arbitrary web (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-05-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.