# CVEs published 2009-07-27

26 CVEs were published on July 27, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2607](https://cve.now/CVE-2009-2607.md): SQL injection vulnerability in the com\_pinboard component for Joomla! allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2009-2608](https://cve.now/CVE-2009-2608.md): Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id… (no CVSS)
- [CVE-2009-2609](https://cve.now/CVE-2009-2609.md): SQL injection vulnerability in the amoCourse (com\_amocourse) component for Joomla! allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2009-2610](https://cve.now/CVE-2009-2610.md): Cross-site scripting (XSS) vulnerability in the Links Related module in the Links Package 5.x before 5.x-1.13 and 6.x before 6.x-1.2, a… (no CVSS)
- [CVE-2009-2611](https://cve.now/CVE-2009-2611.md): Directory traversal vulnerability in infusions/last\_seen\_users\_panel/last\_seen\_users\_panel.php in MyFusion (aka MyF) 6 Beta, when… (no CVSS)
- [CVE-2009-2612](https://cve.now/CVE-2009-2612.md): SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter. (no CVSS)
- [CVE-2009-2613](https://cve.now/CVE-2009-2613.md): Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions LinkPal 1.x allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2009-2614](https://cve.now/CVE-2009-2614.md): SQL injection vulnerability in z\_admin\_login.asp in DataCheck Solutions LinkPal 1.x allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2009-2615](https://cve.now/CVE-2009-2615.md): Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2009-2616](https://cve.now/CVE-2009-2616.md): SQL injection vulnerability in z\_admin\_login.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2009-2617](https://cve.now/CVE-2009-2617.md): Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname… (no CVSS)
- [CVE-2009-2618](https://cve.now/CVE-2009-2618.md): SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2009-2619](https://cve.now/CVE-2009-2619.md): SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2008-6877](https://cve.now/CVE-2008-6877.md): Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not supported, allows… (no CVSS)
- [CVE-2008-6878](https://cve.now/CVE-2008-6878.md): Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when .htaccess is not… (no CVSS)
- [CVE-2009-2596](https://cve.now/CVE-2009-2596.md): Unspecified vulnerability in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv\_121, when extended file… (no CVSS)
- [CVE-2009-2597](https://cve.now/CVE-2009-2597.md): The Sun Java System (SJS) Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2009-2598](https://cve.now/CVE-2009-2598.md): Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2009-2599](https://cve.now/CVE-2009-2599.md): SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2009-2600](https://cve.now/CVE-2009-2600.md): Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to read arbitrary files… (no CVSS)
- [CVE-2009-2601](https://cve.now/CVE-2009-2601.md): SQL injection vulnerability in the Joomlaequipment (aka JUser or com\_juser) component 2.0.4 for Joomla! allows remote attackers to execute… (no CVSS)
- [CVE-2009-2602](https://cve.now/CVE-2009-2602.md): R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, which allows remote… (no CVSS)
- [CVE-2009-2603](https://cve.now/CVE-2009-2603.md): Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2009-2604](https://cve.now/CVE-2009-2604.md): Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2009-2605](https://cve.now/CVE-2009-2605.md): Multiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2009-2606](https://cve.now/CVE-2009-2606.md): ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-07-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.