# CVEs published 2011-11-01

45 CVEs were published on November 1, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4968](https://cve.now/CVE-2010-4968.md): SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com\_wmtpic) component 1.0 for Joomla! allows remote attackers to execut (no CVSS)
- [CVE-2010-4969](https://cve.now/CVE-2010-4969.md): SQL injection vulnerability in articlesdetails.php in BrotherScripts (BS) Business Directory allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2010-4970](https://cve.now/CVE-2010-4970.md): SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2010-4972](https://cve.now/CVE-2010-4972.md): SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncat\_id pa (no CVSS)
- [CVE-2010-4973](https://cve.now/CVE-2010-4973.md): Cross-site scripting (XSS) vulnerability in the search feature in Campsite 3.4.0 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2010-4974](https://cve.now/CVE-2010-4974.md): SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-4975](https://cve.now/CVE-2010-4975.md): SQL injection vulnerability in the Techjoomla SocialAds For JomSocial (com\_socialads) component for Joomla! allows remote attackers to execu (no CVSS)
- [CVE-2010-4976](https://cve.now/CVE-2010-4976.md): Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-4977](https://cve.now/CVE-2010-4977.md): SQL injection vulnerability in menu.php in the Canteen (com\_canteen) component 1.0 for Joomla! allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-4978](https://cve.now/CVE-2010-4978.md): Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2010-4979](https://cve.now/CVE-2010-4979.md): SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the image\_id parameter (no CVSS)
- [CVE-2010-4980](https://cve.now/CVE-2010-4980.md): SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2010-4981](https://cve.now/CVE-2010-4981.md): SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2010-4982](https://cve.now/CVE-2010-4982.md): SQL injection vulnerability in address\_book/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitra (no CVSS)
- [CVE-2010-4983](https://cve.now/CVE-2010-4983.md): SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2010-4984](https://cve.now/CVE-2010-4984.md): SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2010-4985](https://cve.now/CVE-2010-4985.md): Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2010-4986](https://cve.now/CVE-2010-4986.md): SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2010-4987](https://cve.now/CVE-2010-4987.md): SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2010-4988](https://cve.now/CVE-2010-4988.md): PHP remote file inclusion vulnerability in mod\_chatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote (no CVSS)
- [CVE-2010-4989](https://cve.now/CVE-2010-4989.md): SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp paramete (no CVSS)
- [CVE-2010-4990](https://cve.now/CVE-2010-4990.md): SQL injection vulnerability in the Front-edit Address Book (com\_addressbook) component for Joomla! allows remote attackers to execute arbitr (no CVSS)
- [CVE-2010-4991](https://cve.now/CVE-2010-4991.md): SQL injection vulnerability in the NinjaMonials (com\_ninjamonials) component for Joomla! allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2010-4992](https://cve.now/CVE-2010-4992.md): SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2010-4993](https://cve.now/CVE-2010-4993.md): SQL injection vulnerability in the eventcal (com\_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2010-4994](https://cve.now/CVE-2010-4994.md): SQL injection vulnerability in the Jobs Pro component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the de (no CVSS)
- [CVE-2010-4995](https://cve.now/CVE-2010-4995.md): SQL injection vulnerability in the NeoRecruit (com\_neorecruit) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-4996](https://cve.now/CVE-2010-4996.md): SQL injection vulnerability in ogp\_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2010-4999](https://cve.now/CVE-2010-4999.md): SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2010-5001](https://cve.now/CVE-2010-5001.md): SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2010-5002](https://cve.now/CVE-2010-5002.md): Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to injec (no CVSS)
- [CVE-2010-5003](https://cve.now/CVE-2010-5003.md): SQL injection vulnerability in the AutarTimonial (com\_autartimonial) component 1.0.8 for Joomla! allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2011-0941](https://cve.now/CVE-2011-0941.md): Memory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 befor (no CVSS)
- [CVE-2011-1915](https://cve.now/CVE-2011-1915.md): SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2011-4064](https://cve.now/CVE-2011-4064.md): Cross-site scripting (XSS) vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2011-4214](https://cve.now/CVE-2011-4214.md): OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obtain administrator priv (no CVSS)
- [CVE-2011-4215](https://cve.now/CVE-2011-4215.md): SQL injection vulnerability in lib/ooz\_access.php in OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers t (no CVSS)
- [CVE-2011-4216](https://cve.now/CVE-2011-4216.md): Investintech.com SlimPDF Reader does not properly restrict write operations, which allows remote attackers to cause a denial of service (app (no CVSS)
- [CVE-2011-4217](https://cve.now/CVE-2011-4217.md): Investintech.com SlimPDF Reader does not properly restrict read operations during block data moves, which allows remote attackers to cause a (no CVSS)
- [CVE-2011-4218](https://cve.now/CVE-2011-4218.md): Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allows remote attackers to (no CVSS)
- [CVE-2011-4219](https://cve.now/CVE-2011-4219.md): Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cau (no CVSS)
- [CVE-2011-4220](https://cve.now/CVE-2011-4220.md): Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows remote attackers to cau (no CVSS)
- [CVE-2011-4221](https://cve.now/CVE-2011-4221.md): Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a denial of service (appli (no CVSS)
- [CVE-2011-4222](https://cve.now/CVE-2011-4222.md): Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a denial of service (app (no CVSS)
- [CVE-2011-4223](https://cve.now/CVE-2011-4223.md): Unspecified vulnerability in Investintech.com Absolute PDF Server allows remote attackers to cause a denial of service (application crash) o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-11-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.