# CVEs published 2011-07-08

12 CVEs were published on July 8, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4808](https://cve.now/CVE-2010-4808.md): SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter. (no CVSS)
- [CVE-2010-4809](https://cve.now/CVE-2010-4809.md): SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. (no CVSS)
- [CVE-2010-4810](https://cve.now/CVE-2010-4810.md): Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to execute arbitrary PH (no CVSS)
- [CVE-2010-4811](https://cve.now/CVE-2010-4811.md): Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-4812](https://cve.now/CVE-2010-4812.md): Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers to execute arbitrary SQL commands via the (1) tids (no CVSS)
- [CVE-2010-4813](https://cve.now/CVE-2010-4813.md): Cross-site scripting (XSS) vulnerability in the Category Tokens module 6.x before 6.x-1.1 for Drupal allows remote authenticated users with (no CVSS)
- [CVE-2010-4814](https://cve.now/CVE-2010-4814.md): SQL injection vulnerability in index1.php in Best Soft Inc. (no CVSS)
- [CVE-2011-2464](https://cve.now/CVE-2011-2464.md): Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers (no CVSS)
- [CVE-2011-2465](https://cve.now/CVE-2011-2465.md): Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) (no CVSS)
- [CVE-2011-2664](https://cve.now/CVE-2011-2664.md): Unspecified vulnerability in Check Point Multi-Domain Management / Provider-1 NGX R65, R70, R71, and R75, and SmartCenter during installatio (no CVSS)
- [CVE-2011-1001](https://cve.now/CVE-2011-1001.md): dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assisted remote attackers to cause a (no CVSS)
- [CVE-2011-2344](https://cve.now/CVE-2011-2344.md): Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-07-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.