# CVEs published 2011-04-07

6 CVEs were published on April 7, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4779](https://cve.now/CVE-2010-4779.md): Cross-site scripting (XSS) vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9.19.4 and 1.9.20 for WordPress allows remote (no CVSS)
- [CVE-2010-4780](https://cve.now/CVE-2010-4780.md): SQL injection vulnerability in the check\_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versi (no CVSS)
- [CVE-2010-4781](https://cve.now/CVE-2010-4781.md): index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensiti (no CVSS)
- [CVE-2010-4782](https://cve.now/CVE-2010-4782.md): Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allow remote attackers t (no CVSS)
- [CVE-2010-4783](https://cve.now/CVE-2010-4783.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic\_quotes\_gpc is di (no CVSS)
- [CVE-2010-4784](https://cve.now/CVE-2010-4784.md): Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic\_quotes\_gpc is disabled, allo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-04-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.