cve.nowby Sazabi

CVEs published October 9, 2011

42 CVEs were published on October 9, 2011: 0 critical, 0 high.

Published: 42
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 42
Now in CISA KEV: 0
Fix available: 2

Most affected products

dmk/webkitpdf: 2

Medium, low and unrated 42

CVE-2010-4922Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameteUnratedOct 9, 2011
CVE-2010-4923SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands viUnratedOct 9, 2011
CVE-2010-4924PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP UnratedOct 9, 2011
CVE-2010-4925SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL commanUnratedOct 9, 2011
CVE-2010-4926SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL coUnratedOct 9, 2011
CVE-2010-4927SQL injection vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to execute arbUnratedOct 9, 2011
CVE-2010-4928Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers tUnratedOct 9, 2011
CVE-2010-4929SQL injection vulnerability in the Joostina (com_ezautos) component for Joomla! allows remote attackers to execute arbitrary SQL commands viUnratedOct 9, 2011
CVE-2010-4930Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script oUnratedOct 9, 2011
CVE-2010-4931Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .UnratedOct 9, 2011
CVE-2010-4932Cross-site scripting (XSS) vulnerability in search.php in Entrans before 0.3.3 allows remote attackers to inject arbitrary web script or HTMUnratedOct 9, 2011
CVE-2010-4933SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the liUnratedOct 9, 2011
CVE-2010-4934SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id pUnratedOct 9, 2011
CVE-2010-4935SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid pUnratedOct 9, 2011
CVE-2010-4936SQL injection vulnerability in the Slide Show (com_slideshow) component for Joomla! allows remote attackers to execute arbitrary SQL commandUnratedOct 9, 2011
CVE-2010-4937Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL UnratedOct 9, 2011
CVE-2010-4938SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands viUnratedOct 9, 2011
CVE-2010-4939PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the UnratedOct 9, 2011
CVE-2010-4940SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameteUnratedOct 9, 2011
CVE-2010-4941SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SUnratedOct 9, 2011
CVE-2010-4942SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbiUnratedOct 9, 2011
CVE-2010-4943Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in theUnratedOct 9, 2011
CVE-2010-4944SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbiUnratedOct 9, 2011
CVE-2010-4945SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQLUnratedOct 9, 2011
CVE-2010-4946SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands via the products_id pUnratedOct 9, 2011
CVE-2010-4947Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script oUnratedOct 9, 2011
CVE-2010-4948PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote attackers to execute arbiUnratedOct 9, 2011
CVE-2010-4949Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.UnratedOct 9, 2011
CVE-2010-4950SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands UnratedOct 9, 2011
CVE-2010-4951Cross-site scripting (XSS) vulnerability in the xaJax Shoutbox (vx_xajax_shoutbox) extension before 1.0.1 for TYPO3 allows remote attackers UnratedOct 9, 2011
CVE-2010-4952SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary UnratedOct 9, 2011
CVE-2010-4953Unspecified vulnerability in the JW Calendar (jw_calendar) extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitraUnratedOct 9, 2011
CVE-2010-4954SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commandsUnratedOct 9, 2011
CVE-2010-4955SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary UnratedOct 9, 2011
CVE-2010-4956Cross-site scripting (XSS) vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers toUnratedOct 9, 2011
CVE-2010-4957SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to execute arbiUnratedOct 9, 2011
CVE-2010-4958SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameUnratedOct 9, 2011
CVE-2010-4959SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commandUnratedOct 9, 2011
CVE-2010-4960Cross-site scripting (XSS) vulnerability in the Branchenbuch (aka Yellow Pages or mh_branchenbuch) extension before 0.9.1 for TYPO3 allows rUnratedOct 9, 2011
CVE-2010-4961SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQLdmk/webkitpdfUnratedFix availableOct 9, 2011
CVE-2010-4962Unspecified vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commadmk/webkitpdfUnratedFix availableOct 9, 2011
CVE-2010-4963SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the order_by pUnratedOct 9, 2011