# CVEs published 2010-09-22

16 CVEs were published on September 22, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-5003](https://cve.now/CVE-2009-5003.md): SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-3479](https://cve.now/CVE-2010-3479.md): SQL injection vulnerability in list.php in BoutikOne 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. (no CVSS)
- [CVE-2010-3480](https://cve.now/CVE-2010-3480.md): Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic\_quotes\_gpc is disabled, allows remote attackers to in (no CVSS)
- [CVE-2010-3481](https://cve.now/CVE-2010-3481.md): Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic\_quotes\_gpc is disabled, allow remote attackers t (no CVSS)
- [CVE-2010-3482](https://cve.now/CVE-2010-3482.md): Multiple SQL injection vulnerabilities in cms\_write.php in Primitive CMS 1.0.9 allow remote authenticated administrators to execute arbitrar (no CVSS)
- [CVE-2010-3483](https://cve.now/CVE-2010-3483.md): cms\_write.php in Primitive CMS 1.0.9 does not properly restrict access, which allows remote attackers to gain administrative privileges via (no CVSS)
- [CVE-2010-3484](https://cve.now/CVE-2010-3484.md): SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the handle param (no CVSS)
- [CVE-2010-3485](https://cve.now/CVE-2010-3485.md): SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle c (no CVSS)
- [CVE-2010-3486](https://cve.now/CVE-2010-3486.md): Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbitrary files via a (1 (no CVSS)
- [CVE-2010-3487](https://cve.now/CVE-2010-3487.md): Directory traversal vulnerability in YelloSoft Pinky 1.0 for Windows allows remote attackers to read arbitrary files via a %5C (encoded back (no CVSS)
- [CVE-2010-3488](https://cve.now/CVE-2010-3488.md): Directory traversal vulnerability in QuickShare 1.0 allows remote attackers to read arbitrary files via a ... (no CVSS)
- [CVE-2010-3489](https://cve.now/CVE-2010-3489.md): Cross-site scripting (XSS) vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom (formerly Netautor Professional) 5.5.0 a (no CVSS)
- [CVE-2010-3301](https://cve.now/CVE-2010-3301.md): The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86\_64 platform (no CVSS)
- [CVE-2010-3313](https://cve.now/CVE-2010-3313.md): phpgwapi/js/fckeditor/editor/dialog/fck\_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 an (no CVSS, egroupware/egroupware)
- [CVE-2010-3314](https://cve.now/CVE-2010-3314.md): Cross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; a (no CVSS)
- [CVE-2010-3332](https://cve.now/CVE-2010-3332.md): Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Servi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-09-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.