# CVEs published 2010-08-25 31 CVEs were published on August 25, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2009-4977](https://cve.now/CVE-2009-4977.md): PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arbitrary PHP code via a (no CVSS) - [CVE-2009-4978](https://cve.now/CVE-2009-4978.md): Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2009-4979](https://cve.now/CVE-2009-4979.md): Multiple SQL injection vulnerabilities in search.php in Photokorn Gallery 1.81 and earlier allow remote attackers to execute arbitrary SQL c (no CVSS) - [CVE-2009-4980](https://cve.now/CVE-2009-4980.md): Multiple cross-site scripting (XSS) vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2009-4981](https://cve.now/CVE-2009-4981.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack the authentication of (no CVSS) - [CVE-2009-4982](https://cve.now/CVE-2009-4982.md): SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic\_quotes\_gpc is disabled, allows remote attackers to execut (no CVSS) - [CVE-2009-4983](https://cve.now/CVE-2009-4983.md): Multiple cross-site scripting (XSS) vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2009-4984](https://cve.now/CVE-2009-4984.md): Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary we (no CVSS) - [CVE-2009-4985](https://cve.now/CVE-2009-4985.md): SQL injection vulnerability in browse.php in Accessories Me PHP Affiliate Script 1.4 allows remote attackers to execute arbitrary SQL comman (no CVSS) - [CVE-2009-4986](https://cve.now/CVE-2009-4986.md): Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magic\_quotes\_gpc is disabled, allows remote attackers to read arbitr (no CVSS) - [CVE-2009-4987](https://cve.now/CVE-2009-4987.md): admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain administrative access (no CVSS) - [CVE-2009-4988](https://cve.now/CVE-2009-4988.md): Stack-based buffer overflow in NT\_Naming\_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arb (no CVSS) - [CVE-2009-4989](https://cve.now/CVE-2009-4989.md): Cross-site scripting (XSS) vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2009-4990](https://cve.now/CVE-2009-4990.md): Cross-site scripting (XSS) vulnerability in the Webform report module 5.x and 6.x for Drupal allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2009-4991](https://cve.now/CVE-2009-4991.md): Cross-site scripting (XSS) vulnerability in users/resume\_register.php in Omnistar Recruiting allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2009-4992](https://cve.now/CVE-2009-4992.md): SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2009-4993](https://cve.now/CVE-2009-4993.md): PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a (no CVSS) - [CVE-2009-4994](https://cve.now/CVE-2009-4994.md): Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject (no CVSS) - [CVE-2009-4995](https://cve.now/CVE-2009-4995.md): Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject a (no CVSS) - [CVE-2010-1800](https://cve.now/CVE-2010-1800.md): CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redire (no CVSS) - [CVE-2010-1801](https://cve.now/CVE-2010-1801.md): Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a (no CVSS) - [CVE-2010-1802](https://cve.now/CVE-2010-1802.md): libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which al (no CVSS) - [CVE-2010-1808](https://cve.now/CVE-2010-1808.md): Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary co (no CVSS) - [CVE-2010-2360](https://cve.now/CVE-2010-2360.md): Multiple buffer overflows in Winny 2.0b7.1 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors, a dif (no CVSS) - [CVE-2010-2361](https://cve.now/CVE-2010-2361.md): Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead (no CVSS) - [CVE-2010-2362](https://cve.now/CVE-2010-2362.md): Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead (no CVSS) - [CVE-2010-2711](https://cve.now/CVE-2010-2711.md): Unspecified vulnerability in the HP MagCloud app before 1.0.5 for the iPad allows remote attackers to read and modify MagCloud application d (no CVSS) - [CVE-2010-2935](https://cve.now/CVE-2010-2935.md): simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with di (no CVSS) - [CVE-2010-2936](https://cve.now/CVE-2010-2936.md): Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a den (no CVSS) - [CVE-2010-3121](https://cve.now/CVE-2010-3121.md): Buffer overflow in tm-console-bin in the DevonIT thin-client management tool might allow remote attackers to execute arbitrary code via unsp (no CVSS) - [CVE-2010-3122](https://cve.now/CVE-2010-3122.md): The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it e (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-08-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.