# CVEs published 2011-10-05

28 CVEs were published on October 5, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3368](https://cve.now/CVE-2011-3368.md): The mod\_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly intera (no CVSS)
- [CVE-2010-4853](https://cve.now/CVE-2010-4853.md): SQL injection vulnerability in the ccInvoices (com\_ccinvoices) component for Joomla! allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2010-4854](https://cve.now/CVE-2010-4854.md): SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-4855](https://cve.now/CVE-2010-4855.md): SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale\_id parameter. (no CVSS)
- [CVE-2010-4856](https://cve.now/CVE-2010-4856.md): SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter. (no CVSS)
- [CVE-2010-4857](https://cve.now/CVE-2010-4857.md): SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parame (no CVSS)
- [CVE-2010-4858](https://cve.now/CVE-2010-4858.md): Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2010-4859](https://cve.now/CVE-2010-4859.md): SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog\_id p (no CVSS)
- [CVE-2010-4860](https://cve.now/CVE-2010-4860.md): SQL injection vulnerability in product\_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id pa (no CVSS)
- [CVE-2010-4861](https://cve.now/CVE-2010-4861.md): SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parame (no CVSS)
- [CVE-2010-4862](https://cve.now/CVE-2010-4862.md): SQL injection vulnerability in the JExtensions JE Directory (com\_jedirectory) component 1.0 for Joomla! allows remote attackers to execute a (no CVSS)
- [CVE-2010-4863](https://cve.now/CVE-2010-4863.md): Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2010-4864](https://cve.now/CVE-2010-4864.md): SQL injection vulnerability in the Club Manager (com\_clubmanager) component for Joomla! allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2010-4865](https://cve.now/CVE-2010-4865.md): SQL injection vulnerability in the JE Guestbook (com\_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-4866](https://cve.now/CVE-2010-4866.md): SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID par (no CVSS)
- [CVE-2010-4867](https://cve.now/CVE-2010-4867.md): Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to include and execut (no CVSS)
- [CVE-2010-4868](https://cve.now/CVE-2010-4868.md): Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to inject arbi (no CVSS)
- [CVE-2010-4869](https://cve.now/CVE-2010-4869.md): SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu paramete (no CVSS)
- [CVE-2000-1247](https://cve.now/CVE-2000-1247.md): The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which all (no CVSS)
- [CVE-2008-7300](https://cve.now/CVE-2008-7300.md): The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv\_39 through snv\_67, when a labeled (no CVSS)
- [CVE-2008-7301](https://cve.now/CVE-2008-7301.md): SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username pa (no CVSS)
- [CVE-2008-7302](https://cve.now/CVE-2008-7302.md): SQL injection vulnerability in netinvoice.php in the nBill (com\_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execu (no CVSS)
- [CVE-2011-0459](https://cve.now/CVE-2011-0459.md): Cross-site scripting (XSS) vulnerability in Cyber-Ark Password Vault Web Access (PVWA) 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 thr (no CVSS)
- [CVE-2011-1076](https://cve.now/CVE-2011-1076.md): net/dns\_resolver/dns\_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NULL pointer dereferenc (no CVSS)
- [CVE-2011-1159](https://cve.now/CVE-2011-1159.md): acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any d (no CVSS)
- [CVE-2011-1764](https://cve.now/CVE-2011-1764.md): Format string vulnerability in the dkim\_exim\_verify\_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execut (no CVSS)
- [CVE-2011-1827](https://cve.now/CVE-2011-1827.md): Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distrib (no CVSS)
- [CVE-2011-3982](https://cve.now/CVE-2011-3982.md): The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, which allows local us (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-10-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.