# CVEs published 2010-12-04 9 CVEs were published on December 4, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-4399](https://cve.now/CVE-2010-4399.md): Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magic\_quotes\_gpc is disabled, allows remote attack (no CVSS) - [CVE-2010-4400](https://cve.now/CVE-2010-4400.md): SQL injection vulnerability in \_rights.php in DynPG CMS 4.2.0 allows remote attackers to execute arbitrary SQL commands via the giveRights\_U (no CVSS) - [CVE-2010-4401](https://cve.now/CVE-2010-4401.md): languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the install (no CVSS) - [CVE-2010-4402](https://cve.now/CVE-2010-4402.md): Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and earlier for WordPress allow remote (no CVSS) - [CVE-2010-4403](https://cve.now/CVE-2010-4403.md): The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) (no CVSS) - [CVE-2010-4404](https://cve.now/CVE-2010-4404.md): SQL injection vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to execute arbit (no CVSS) - [CVE-2010-4405](https://cve.now/CVE-2010-4405.md): Cross-site scripting (XSS) vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to (no CVSS) - [CVE-2010-4406](https://cve.now/CVE-2010-4406.md): Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magic\_quotes\_gpc is disabled, allows remote attac (no CVSS) - [CVE-2010-4407](https://cve.now/CVE-2010-4407.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlGuest 1.1c-patched allow remote attackers to inject arbitrary web scri (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-12-04 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.