# CVEs published 2009-06-18

14 CVEs were published on June 18, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2109](https://cve.now/CVE-2009-2109.md): Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directory traversal… (no CVSS)
- [CVE-2009-2110](https://cve.now/CVE-2009-2110.md): Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic\_quotes\_gpc is disabled, allow remote attackers to include and… (no CVSS)
- [CVE-2009-2111](https://cve.now/CVE-2009-2111.md): Static code injection vulnerability in add\_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted… (no CVSS)
- [CVE-2009-2112](https://cve.now/CVE-2009-2112.md): Directory traversal vulnerability in include/page\_bottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local… (no CVSS)
- [CVE-2009-2113](https://cve.now/CVE-2009-2113.md): Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter… (no CVSS)
- [CVE-2009-2114](https://cve.now/CVE-2009-2114.md): Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2009-2115](https://cve.now/CVE-2009-2115.md): admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id… (no CVSS)
- [CVE-2009-2116](https://cve.now/CVE-2009-2116.md): Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory… (no CVSS)
- [CVE-2009-2117](https://cve.now/CVE-2009-2117.md): uye\_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the kulladi… (no CVSS)
- [CVE-2009-2118](https://cve.now/CVE-2009-2118.md): Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2009-2119](https://cve.now/CVE-2009-2119.md): Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through… (no CVSS)
- [CVE-2009-2120](https://cve.now/CVE-2009-2120.md): Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2009-1935](https://cve.now/CVE-2009-1935.md): Integer overflow in the pipe\_build\_write\_buffer function (sys/kern/sys\_pipe.c) in the direct write optimization feature in the pipe… (no CVSS)
- [CVE-2009-2108](https://cve.now/CVE-2009-2108.md): git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.