# CVEs published 2009-01-09

13 CVEs were published on January 9, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5881](https://cve.now/CVE-2008-5881.md): Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via direct (no CVSS)
- [CVE-2008-5882](https://cve.now/CVE-2008-5882.md): SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server (BCS) before 6.1, as used by Avaya AG250 - Broadca (no CVSS)
- [CVE-2009-0103](https://cve.now/CVE-2009-0103.md): Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1 (no CVSS)
- [CVE-2009-0104](https://cve.now/CVE-2009-0104.md): SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter i (no CVSS)
- [CVE-2009-0105](https://cve.now/CVE-2009-0105.md): Cross-site scripting (XSS) vulnerability in index.php in EZpack 4.2b2 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2009-0106](https://cve.now/CVE-2009-0106.md): SQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2009-0107](https://cve.now/CVE-2009-0107.md): Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2009-0108](https://cve.now/CVE-2009-0108.md): PHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain administrative access via modified (1) PHPAUCTI (no CVSS)
- [CVE-2009-0109](https://cve.now/CVE-2009-0109.md): SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the usern (no CVSS)
- [CVE-2009-0110](https://cve.now/CVE-2009-0110.md): SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the forumi (no CVSS)
- [CVE-2009-0111](https://cve.now/CVE-2009-0111.md): SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2009-0112](https://cve.now/CVE-2009-0112.md): Cross-site request forgery (CSRF) vulnerability in admin/agent\_edit.asp in PollPro 3.0 allows remote attackers to create or modify accounts (no CVSS)
- [CVE-2009-0113](https://cve.now/CVE-2009-0113.md): Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-01-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.