# CVEs published 2011-10-08

39 CVEs were published on October 8, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4893](https://cve.now/CVE-2010-4893.md): Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2010-4894](https://cve.now/CVE-2010-4894.md): SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL commands via the name p (no CVSS)
- [CVE-2010-4895](https://cve.now/CVE-2010-4895.md): Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2010-4896](https://cve.now/CVE-2010-4896.md): Cross-site scripting (XSS) vulnerability in admin/index.asp in Member Management System 4.0 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2010-4897](https://cve.now/CVE-2010-4897.md): SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For (no CVSS)
- [CVE-2010-4898](https://cve.now/CVE-2010-4898.md): SQL injection vulnerability in the Gantry (com\_gantry) component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2010-4899](https://cve.now/CVE-2010-4899.md): SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2010-4900](https://cve.now/CVE-2010-4900.md): Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites (no CVSS)
- [CVE-2010-4901](https://cve.now/CVE-2010-4901.md): Multiple cross-site scripting (XSS) vulnerabilities in char\_map.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2010-4902](https://cve.now/CVE-2010-4902.md): Multiple SQL injection vulnerabilities in the Clantools (com\_clantools) component 1.2.3 for Joomla! allow remote attackers to execute arbitr (no CVSS)
- [CVE-2010-4903](https://cve.now/CVE-2010-4903.md): SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr param (no CVSS)
- [CVE-2010-4904](https://cve.now/CVE-2010-4904.md): SQL injection vulnerability in the Aardvertiser (com\_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute ar (no CVSS)
- [CVE-2010-4905](https://cve.now/CVE-2010-4905.md): SQL injection vulnerability in article\_details.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2010-4906](https://cve.now/CVE-2010-4906.md): SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-4907](https://cve.now/CVE-2010-4907.md): Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-4908](https://cve.now/CVE-2010-4908.md): SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid p (no CVSS)
- [CVE-2010-4909](https://cve.now/CVE-2010-4909.md): Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2010-4910](https://cve.now/CVE-2010-4910.md): SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the Even (no CVSS)
- [CVE-2010-4911](https://cve.now/CVE-2010-4911.md): SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the si (no CVSS)
- [CVE-2010-4912](https://cve.now/CVE-2010-4912.md): SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid paramet (no CVSS)
- [CVE-2010-4913](https://cve.now/CVE-2010-4913.md): Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2010-4914](https://cve.now/CVE-2010-4914.md): PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote attackers to execute arb (no CVSS)
- [CVE-2010-4915](https://cve.now/CVE-2010-4915.md): SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the Boo (no CVSS)
- [CVE-2010-4916](https://cve.now/CVE-2010-4916.md): Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2010-4917](https://cve.now/CVE-2010-4917.md): SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words para (no CVSS)
- [CVE-2010-4918](https://cve.now/CVE-2010-4918.md): PHP remote file inclusion vulnerability in iJoomla Magazine (com\_magazine) component 3.0.1 for Joomla! allows remote attackers to execute ar (no CVSS)
- [CVE-2010-4919](https://cve.now/CVE-2010-4919.md): SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-4920](https://cve.now/CVE-2010-4920.md): SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2010-4921](https://cve.now/CVE-2010-4921.md): SQL injection vulnerability in inc\_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2011-0333](https://cve.now/CVE-2011-0333.md): Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupW (no CVSS)
- [CVE-2011-0334](https://cve.now/CVE-2011-0334.md): Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to exe (no CVSS)
- [CVE-2011-1696](https://cve.now/CVE-2011-1696.md): Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, (no CVSS)
- [CVE-2011-2218](https://cve.now/CVE-2011-2218.md): Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2011-2219](https://cve.now/CVE-2011-2219.md): Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2011-2227](https://cve.now/CVE-2011-2227.md): Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, (no CVSS)
- [CVE-2011-2661](https://cve.now/CVE-2011-2661.md): Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitra (no CVSS)
- [CVE-2011-2662](https://cve.now/CVE-2011-2662.md): Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2011-2663](https://cve.now/CVE-2011-2663.md): Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2011-3598](https://cve.now/CVE-2011-3598.md): Multiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-10-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.