# CVEs published 2009-08-24

40 CVEs were published on August 24, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-7053](https://cve.now/CVE-2008-7053.md): LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash) by setting the… (no CVSS)
- [CVE-2008-7054](https://cve.now/CVE-2008-7054.md): Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via… (no CVSS)
- [CVE-2008-7055](https://cve.now/CVE-2008-7055.md): module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute… (no CVSS)
- [CVE-2008-7056](https://cve.now/CVE-2008-7056.md): BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain copies of the… (no CVSS)
- [CVE-2008-7057](https://cve.now/CVE-2008-7057.md): Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbitrary HTML or web… (no CVSS)
- [CVE-2008-7058](https://cve.now/CVE-2008-7058.md): Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authentication of… (no CVSS)
- [CVE-2008-7059](https://cve.now/CVE-2008-7059.md): SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter. (no CVSS)
- [CVE-2008-7060](https://cve.now/CVE-2008-7060.md): Multiple cross-site scripting (XSS) vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via… (no CVSS)
- [CVE-2008-7061](https://cve.now/CVE-2008-7061.md): The tooltip manager (chrome/views/tooltip\_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30… (no CVSS)
- [CVE-2009-2951](https://cve.now/CVE-2009-2951.md): Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers… (no CVSS)
- [CVE-2009-2952](https://cve.now/CVE-2009-2952.md): Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv\_51, allows local users to cause a… (no CVSS)
- [CVE-2009-2953](https://cve.now/CVE-2009-2953.md): Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption) via JavaScript… (no CVSS)
- [CVE-2009-2954](https://cve.now/CVE-2009-2954.md): Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU consumption and… (no CVSS)
- [CVE-2009-2955](https://cve.now/CVE-2009-2955.md): Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via… (no CVSS)
- [CVE-2009-2956](https://cve.now/CVE-2009-2956.md): The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with… (no CVSS)
- [CVE-2003-1574](https://cve.now/CVE-2003-1574.md): TikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with an arbitrary password, possibly related… (no CVSS)
- [CVE-2008-7029](https://cve.now/CVE-2008-7029.md): Unrestricted file upload vulnerability in usercp.php in AlilG Application AliBoard Beta allows remote authenticated users to execute… (no CVSS)
- [CVE-2008-7030](https://cve.now/CVE-2008-7030.md): Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS)
- [CVE-2008-7031](https://cve.now/CVE-2008-7031.md): Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2008-7032](https://cve.now/CVE-2008-7032.md): Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote… (no CVSS)
- [CVE-2008-7033](https://cve.now/CVE-2008-7033.md): SQL injection vulnerability in the Simple Shop Galore (com\_simpleshop) component for Joomla! allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2008-7034](https://cve.now/CVE-2008-7034.md): PHP remote file inclusion vulnerability in kernel/smarty/Smarty.class.php in PHPEcho CMS 2.0 rc3 allows remote attackers to execute… (no CVSS)
- [CVE-2008-7035](https://cve.now/CVE-2008-7035.md): Cross-site scripting (XSS) vulnerability in an unspecified component in Simple Machines phpRaider 1.0.7 allows remote attackers to inject… (no CVSS)
- [CVE-2008-7036](https://cve.now/CVE-2008-7036.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker… (no CVSS)
- [CVE-2008-7037](https://cve.now/CVE-2008-7037.md): The Sidebar gadget in ITN News Gadget (aka ITN Hub Gadget) 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote… (no CVSS)
- [CVE-2008-7038](https://cve.now/CVE-2008-7038.md): SQL injection vulnerability in the My\_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid… (no CVSS)
- [CVE-2008-7039](https://cve.now/CVE-2008-7039.md): Cross-site scripting (XSS) vulnerability in admin/comments.php in Gelato CMS 0.95 allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2008-7040](https://cve.now/CVE-2008-7040.md): SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remote attackers to… (no CVSS)
- [CVE-2008-7041](https://cve.now/CVE-2008-7041.md): AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin/home.php. (no CVSS)
- [CVE-2008-7042](https://cve.now/CVE-2008-7042.md): PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to execute… (no CVSS)
- [CVE-2008-7043](https://cve.now/CVE-2008-7043.md): Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to… (no CVSS)
- [CVE-2008-7044](https://cve.now/CVE-2008-7044.md): SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script (AJPoll) Database version allows remote… (no CVSS)
- [CVE-2008-7045](https://cve.now/CVE-2008-7045.md): AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll votes via a direct… (no CVSS)
- [CVE-2008-7046](https://cve.now/CVE-2008-7046.md): AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a direct request to… (no CVSS)
- [CVE-2008-7047](https://cve.now/CVE-2008-7047.md): NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete rooms and messages via… (no CVSS)
- [CVE-2008-7048](https://cve.now/CVE-2008-7048.md): Multiple cross-site scripting (XSS) vulnerabilities in NatterChat 1.12 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2008-7049](https://cve.now/CVE-2008-7049.md): Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2008-7050](https://cve.now/CVE-2008-7050.md): The password\_check function in auth/auth\_phpbb3.php in WoW Raid Manager 3.5.1 before Patch 1, when using PHPBB3 authentication, (1) does… (no CVSS)
- [CVE-2008-7051](https://cve.now/CVE-2008-7051.md): AJ Square AJ Article allows remote attackers to bypass authentication and access administrator functionality via a direct request to (1)… (no CVSS)
- [CVE-2008-7052](https://cve.now/CVE-2008-7052.md): Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-08-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.