# CVEs published 2011-10-09

42 CVEs were published on October 9, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4922](https://cve.now/CVE-2010-4922.md): Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i paramete (no CVSS)
- [CVE-2010-4923](https://cve.now/CVE-2010-4923.md): SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-4924](https://cve.now/CVE-2010-4924.md): PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2010-4925](https://cve.now/CVE-2010-4925.md): SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2010-4926](https://cve.now/CVE-2010-4926.md): SQL injection vulnerability in the TimeTrack (com\_timetrack) component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2010-4927](https://cve.now/CVE-2010-4927.md): SQL injection vulnerability in the Restaurant Guide (com\_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to execute arb (no CVSS)
- [CVE-2010-4928](https://cve.now/CVE-2010-4928.md): Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com\_restaurantguide) component 1.0.0 for Joomla! allows remote attackers t (no CVSS)
- [CVE-2010-4929](https://cve.now/CVE-2010-4929.md): SQL injection vulnerability in the Joostina (com\_ezautos) component for Joomla! allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-4930](https://cve.now/CVE-2010-4930.md): Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2010-4931](https://cve.now/CVE-2010-4931.md): Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a . (no CVSS)
- [CVE-2010-4932](https://cve.now/CVE-2010-4932.md): Cross-site scripting (XSS) vulnerability in search.php in Entrans before 0.3.3 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2010-4933](https://cve.now/CVE-2010-4933.md): SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the li (no CVSS)
- [CVE-2010-4934](https://cve.now/CVE-2010-4934.md): SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2010-4935](https://cve.now/CVE-2010-4935.md): SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid p (no CVSS)
- [CVE-2010-4936](https://cve.now/CVE-2010-4936.md): SQL injection vulnerability in the Slide Show (com\_slideshow) component for Joomla! allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2010-4937](https://cve.now/CVE-2010-4937.md): Multiple SQL injection vulnerabilities in the Amblog (com\_amblog) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-4938](https://cve.now/CVE-2010-4938.md): SQL injection vulnerability in the Weblinks (com\_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-4939](https://cve.now/CVE-2010-4939.md): PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2010-4940](https://cve.now/CVE-2010-4940.md): SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id paramete (no CVSS)
- [CVE-2010-4941](https://cve.now/CVE-2010-4941.md): SQL injection vulnerability in the Teams (com\_teams) component 1\_1028\_100809\_1711 for Joomla! allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2010-4942](https://cve.now/CVE-2010-4942.md): SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbi (no CVSS)
- [CVE-2010-4943](https://cve.now/CVE-2010-4943.md): Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2010-4944](https://cve.now/CVE-2010-4944.md): SQL injection vulnerability in the Elite Experts (com\_elite\_experts) component for Mambo and Joomla! allows remote attackers to execute arbi (no CVSS)
- [CVE-2010-4945](https://cve.now/CVE-2010-4945.md): SQL injection vulnerability in the CamelcityDB (com\_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-4946](https://cve.now/CVE-2010-4946.md): SQL injection vulnerability in product\_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands via the products\_id p (no CVSS)
- [CVE-2010-4947](https://cve.now/CVE-2010-4947.md): Cross-site scripting (XSS) vulnerability in advanced\_search\_result.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2010-4948](https://cve.now/CVE-2010-4948.md): PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote attackers to execute arbi (no CVSS)
- [CVE-2010-4949](https://cve.now/CVE-2010-4949.md): Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1. (no CVSS)
- [CVE-2010-4950](https://cve.now/CVE-2010-4950.md): SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-4951](https://cve.now/CVE-2010-4951.md): Cross-site scripting (XSS) vulnerability in the xaJax Shoutbox (vx\_xajax\_shoutbox) extension before 1.0.1 for TYPO3 allows remote attackers (no CVSS)
- [CVE-2010-4952](https://cve.now/CVE-2010-4952.md): SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-4953](https://cve.now/CVE-2010-4953.md): Unspecified vulnerability in the JW Calendar (jw\_calendar) extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2010-4954](https://cve.now/CVE-2010-4954.md): SQL injection vulnerability in product\_reviews\_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-4955](https://cve.now/CVE-2010-4955.md): SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-4956](https://cve.now/CVE-2010-4956.md): Cross-site scripting (XSS) vulnerability in the Questionnaire (ke\_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to (no CVSS)
- [CVE-2010-4957](https://cve.now/CVE-2010-4957.md): SQL injection vulnerability in the Questionnaire (ke\_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to execute arbi (no CVSS)
- [CVE-2010-4958](https://cve.now/CVE-2010-4958.md): SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parame (no CVSS)
- [CVE-2010-4959](https://cve.now/CVE-2010-4959.md): SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2010-4960](https://cve.now/CVE-2010-4960.md): Cross-site scripting (XSS) vulnerability in the Branchenbuch (aka Yellow Pages or mh\_branchenbuch) extension before 0.9.1 for TYPO3 allows r (no CVSS)
- [CVE-2010-4961](https://cve.now/CVE-2010-4961.md): SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL (no CVSS, dmk/webkitpdf)
- [CVE-2010-4962](https://cve.now/CVE-2010-4962.md): Unspecified vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary comma (no CVSS, dmk/webkitpdf)
- [CVE-2010-4963](https://cve.now/CVE-2010-4963.md): SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the order\_by p (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-10-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.