# CVEs published 2015-01-03 9 CVEs were published on January 3, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2014-9464](https://cve.now/CVE-2014-9464.md): SQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2010-5314](https://cve.now/CVE-2010-5314.md): Cross-site scripting (XSS) vulnerability in controllers/home\_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary (no CVSS) - [CVE-2010-5315](https://cve.now/CVE-2010-5315.md): Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of admin (no CVSS) - [CVE-2010-5316](https://cve.now/CVE-2010-5316.md): Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2010-5317](https://cve.now/CVE-2010-5317.md): Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2010-5318](https://cve.now/CVE-2010-5318.md): The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by (no CVSS) - [CVE-2010-5319](https://cve.now/CVE-2010-5319.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Kandidat CMS 1.4.2 allow remote attackers to hijack the authentication of admi (no CVSS) - [CVE-2010-5320](https://cve.now/CVE-2010-5320.md): Multiple cross-site request forgery (CSRF) vulnerabilities in MemHT Portal 4.0.1 allow remote attackers to hijack the authentication of admi (no CVSS) - [CVE-2014-9427](https://cve.now/CVE-2014-9427.md): sapi/cgi/cgi\_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a . (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-01-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.