# CVEs published 2011-11-02

54 CVEs were published on November 2, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4971](https://cve.now/CVE-2010-4971.md): Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitr (no CVSS)
- [CVE-2010-4997](https://cve.now/CVE-2010-4997.md): SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id pa (no CVSS)
- [CVE-2010-4998](https://cve.now/CVE-2010-4998.md): PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote attackers to execut (no CVSS)
- [CVE-2010-5000](https://cve.now/CVE-2010-5000.md): SQL injection vulnerability in login/login\_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-5004](https://cve.now/CVE-2010-5004.md): SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2010-5005](https://cve.now/CVE-2010-5005.md): Cross-site scripting (XSS) vulnerability in members/profileCommentsResponse.php in Rayzz Photoz allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-5006](https://cve.now/CVE-2010-5006.md): SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the c (no CVSS)
- [CVE-2010-5007](https://cve.now/CVE-2010-5007.md): Cross-site scripting (XSS) vulnerability in pages/match\_report.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-5008](https://cve.now/CVE-2010-5008.md): SQL injection vulnerability in pages/contact\_list\_mail\_form.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2010-5009](https://cve.now/CVE-2010-5009.md): SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid (no CVSS)
- [CVE-2010-5010](https://cve.now/CVE-2010-5010.md): Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2010-5011](https://cve.now/CVE-2010-5011.md): SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-5012](https://cve.now/CVE-2010-5012.md): SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL commands via the id paramet (no CVSS)
- [CVE-2010-5013](https://cve.now/CVE-2010-5013.md): SQL injection vulnerability in listing\_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows remote attackers to exe (no CVSS)
- [CVE-2010-5014](https://cve.now/CVE-2010-5014.md): SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQL commands via the l (no CVSS)
- [CVE-2010-5015](https://cve.now/CVE-2010-5015.md): SQL injection vulnerability in view\_photo.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-5016](https://cve.now/CVE-2010-5016.md): SQL injection vulnerability in matchdb.php in Elite Gaming Ladders 3.5 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-5017](https://cve.now/CVE-2010-5017.md): SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 allows remote attackers to execute arbitrary SQL commands via the accou (no CVSS)
- [CVE-2010-5018](https://cve.now/CVE-2010-5018.md): Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script allows remote attackers (no CVSS)
- [CVE-2010-5019](https://cve.now/CVE-2010-5019.md): SQL injection vulnerability in view\_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-5020](https://cve.now/CVE-2010-5020.md): SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the pag (no CVSS)
- [CVE-2010-5021](https://cve.now/CVE-2010-5021.md): SQL injection vulnerability in view\_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-5022](https://cve.now/CVE-2010-5022.md): SQL injection vulnerability in the JExtensions JE Story Submit (com\_jesubmit) component 1.4 for Joomla! allows remote attackers to execute a (no CVSS)
- [CVE-2010-5023](https://cve.now/CVE-2010-5023.md): SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2010-5024](https://cve.now/CVE-2010-5024.md): SQL injection vulnerability in manage/add\_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, (no CVSS)
- [CVE-2010-5025](https://cve.now/CVE-2010-5025.md): Cross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2010-5026](https://cve.now/CVE-2010-5026.md): SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-5027](https://cve.now/CVE-2010-5027.md): Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to inject a (no CVSS)
- [CVE-2010-5028](https://cve.now/CVE-2010-5028.md): SQL injection vulnerability in the JExtensions JE Job (com\_jejob) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-5029](https://cve.now/CVE-2010-5029.md): SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter (no CVSS)
- [CVE-2010-5030](https://cve.now/CVE-2010-5030.md): Cross-site scripting (XSS) vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2010-5031](https://cve.now/CVE-2010-5031.md): Cross-site scripting (XSS) vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2010-5032](https://cve.now/CVE-2010-5032.md): SQL injection vulnerability in the BF Quiz (com\_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-5033](https://cve.now/CVE-2010-5033.md): SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL commands via the CatDisplay (no CVSS)
- [CVE-2010-5034](https://cve.now/CVE-2010-5034.md): SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-5035](https://cve.now/CVE-2010-5035.md): Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-5036](https://cve.now/CVE-2010-5036.md): SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type para (no CVSS)
- [CVE-2010-5037](https://cve.now/CVE-2010-5037.md): SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the a (no CVSS)
- [CVE-2010-5038](https://cve.now/CVE-2010-5038.md): PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-5039](https://cve.now/CVE-2010-5039.md): SQL injection vulnerability in control/admin\_login.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2010-5040](https://cve.now/CVE-2010-5040.md): PHP remote file inclusion vulnerability in nucleus/plugins/NP\_gallery.php in the NP\_Gallery plugin 0.94 for Nucleus allows remote attackers (no CVSS)
- [CVE-2010-5041](https://cve.now/CVE-2010-5041.md): SQL injection vulnerability in index.php in the NP\_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-5042](https://cve.now/CVE-2010-5042.md): Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com\_djartgallery) component 0.9.1 for Joomla! allows remote attackers to inje (no CVSS)
- [CVE-2010-5043](https://cve.now/CVE-2010-5043.md): SQL injection vulnerability in the DJ-ArtGallery (com\_djartgallery) component 0.9.1 for Joomla! allows remote authenticated users to execute (no CVSS)
- [CVE-2010-5044](https://cve.now/CVE-2010-5044.md): SQL injection vulnerability in models/log.php in the Search Log (com\_searchlog) component 3.1.0 for Joomla! allows remote authenticated user (no CVSS)
- [CVE-2010-5045](https://cve.now/CVE-2010-5045.md): Cross-site scripting (XSS) vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2011-1918](https://cve.now/CVE-2011-1918.md): Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 (no CVSS)
- [CVE-2011-1919](https://cve.now/CVE-2011-1919.md): Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow (no CVSS)
- [CVE-2011-3165](https://cve.now/CVE-2011-3165.md): Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via u (no CVSS)
- [CVE-2011-3166](https://cve.now/CVE-2011-3166.md): Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via u (no CVSS)
- [CVE-2011-3167](https://cve.now/CVE-2011-3167.md): Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via u (no CVSS)
- [CVE-2011-3320](https://cve.now/CVE-2011-3320.md): Cross-site scripting (XSS) vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier al (no CVSS)
- [CVE-2011-4074](https://cve.now/CVE-2011-4074.md): Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2011-4075](https://cve.now/CVE-2011-4075.md): The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the or (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-11-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.