# CVEs published 2010-06-09

7 CVEs were published on June 9, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2254](https://cve.now/CVE-2010-2254.md): SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2010-2255](https://cve.now/CVE-2010-2255.md): SQL injection vulnerability in the BF Survey Pro (com\_bfsurvey\_pro) component before 1.3.1, BF Survey Pro Free (com\_bfsurvey\_profree) compon (no CVSS)
- [CVE-2010-2256](https://cve.now/CVE-2010-2256.md): Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitra (no CVSS)
- [CVE-2010-2257](https://cve.now/CVE-2010-2257.md): SQL injection vulnerability in index\_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-2258](https://cve.now/CVE-2010-2258.md): Cross-site scripting (XSS) vulnerability in signupconfirm.php in phpBannerExchange 1.2 Arabic allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2010-2259](https://cve.now/CVE-2010-2259.md): Directory traversal vulnerability in the BF Survey (com\_bfsurvey) component for Joomla! allows remote attackers to include and execute arbit (no CVSS)
- [CVE-2010-2260](https://cve.now/CVE-2010-2260.md): Multiple cross-site scripting (XSS) vulnerabilities in Gambit Design Bandwidth Meter, 0.72 and possibly 1.2, allow remote attackers to injec (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-06-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.