# CVEs published 2009-01-09

13 CVEs were published on January 9, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5881](https://cve.now/CVE-2008-5881.md): Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via… (no CVSS)
- [CVE-2008-5882](https://cve.now/CVE-2008-5882.md): SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server (BCS) before 6.1, as used by Avaya AG250… (no CVSS)
- [CVE-2009-0103](https://cve.now/CVE-2009-0103.md): Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the… (no CVSS)
- [CVE-2009-0104](https://cve.now/CVE-2009-0104.md): SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter… (no CVSS)
- [CVE-2009-0105](https://cve.now/CVE-2009-0105.md): Cross-site scripting (XSS) vulnerability in index.php in EZpack 4.2b2 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2009-0106](https://cve.now/CVE-2009-0106.md): SQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2009-0107](https://cve.now/CVE-2009-0107.md): Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2009-0108](https://cve.now/CVE-2009-0108.md): PHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain administrative access via modified (1)… (no CVSS)
- [CVE-2009-0109](https://cve.now/CVE-2009-0109.md): SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2009-0110](https://cve.now/CVE-2009-0110.md): SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2009-0111](https://cve.now/CVE-2009-0111.md): SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2009-0112](https://cve.now/CVE-2009-0112.md): Cross-site request forgery (CSRF) vulnerability in admin/agent\_edit.asp in PollPro 3.0 allows remote attackers to create or modify… (no CVSS)
- [CVE-2009-0113](https://cve.now/CVE-2009-0113.md): Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-01-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.