# CVEs published 2010-07-23

16 CVEs were published on July 23, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2844](https://cve.now/CVE-2010-2844.md): Cross-site scripting (XSS) vulnerability in news\_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2010-2845](https://cve.now/CVE-2010-2845.md): SQL injection vulnerability in the QuickFAQ (com\_quickfaq) component 1.0.3 for Joomla! allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2010-2846](https://cve.now/CVE-2010-2846.md): Cross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com\_artforms) component 2.1b7.2 RC2 for Joomla! allows remote attacker (no CVSS)
- [CVE-2010-2847](https://cve.now/CVE-2010-2847.md): Multiple SQL injection vulnerabilities in the InterJoomla ArtForms (com\_artforms) component 2.1b7.2 RC2 for Joomla! allow remote attackers t (no CVSS)
- [CVE-2010-2848](https://cve.now/CVE-2010-2848.md): Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com\_artforms) component 2.1b7. (no CVSS)
- [CVE-2010-2849](https://cve.now/CVE-2010-2849.md): Cross-site scripting (XSS) vulnerability in productionnu2/nuedit.php in nuBuilder 10.04.20, and possibly other versions before 10.07.12, all (no CVSS)
- [CVE-2010-2850](https://cve.now/CVE-2010-2850.md): Directory traversal vulnerability in productionnu2/fileuploader.php in nuBuilder 10.04.20, and possibly other versions before 10.07.12, allo (no CVSS)
- [CVE-2010-2851](https://cve.now/CVE-2010-2851.md): SQL injection vulnerability in the BookLibrary From Same Author (com\_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote (no CVSS)
- [CVE-2010-2852](https://cve.now/CVE-2010-2852.md): Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie\_debug.php in RunCms 2.1, when the Headlines module is (no CVSS)
- [CVE-2010-2853](https://cve.now/CVE-2010-2853.md): SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-2854](https://cve.now/CVE-2010-2854.md): Multiple cross-site scripting (XSS) vulnerabilities in modfile.php in Event Horizon (EVH) 1.1.10, when magic\_quotes\_gpc is disabled, allow r (no CVSS)
- [CVE-2010-2855](https://cve.now/CVE-2010-2855.md): Multiple SQL injection vulnerabilities in modfile.php in Event Horizon (EVH) 1.1.10, when magic\_quotes\_gpc is disabled, allow remote attacke (no CVSS)
- [CVE-2010-2856](https://cve.now/CVE-2010-2856.md): Cross-site scripting (XSS) vulnerability in admin/currencies.php in osCSS 1.2.2, and probably earlier versions, allows remote attackers to i (no CVSS)
- [CVE-2010-2857](https://cve.now/CVE-2010-2857.md): Directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly ha (no CVSS)
- [CVE-2010-2858](https://cve.now/CVE-2010-2858.md): Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2010-2859](https://cve.now/CVE-2010-2859.md): news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-07-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.