# CVEs published 2009-02-02

25 CVEs were published on February 2, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4990](https://cve.now/CVE-2008-4990.md): Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink att (no CVSS)
- [CVE-2009-0272](https://cve.now/CVE-2009-0272.md): Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote (no CVSS)
- [CVE-2009-0273](https://cve.now/CVE-2009-0273.md): Multiple cross-site scripting (XSS) vulnerabilities in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allow remo (no CVSS)
- [CVE-2009-0390](https://cve.now/CVE-2009-0390.md): Argument injection vulnerability in Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to send si (no CVSS)
- [CVE-2009-0391](https://cve.now/CVE-2009-0391.md): Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0.1 on z/OS allows attackers to read arbitrary files via unknown vecto (no CVSS)
- [CVE-2008-6017](https://cve.now/CVE-2008-6017.md): SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter (no CVSS)
- [CVE-2008-6018](https://cve.now/CVE-2008-6018.md): Directory traversal vulnerability in index.php in MyPHPSite, when magic\_quotes\_gpc is disabled, allows remote attackers to read arbitrary fi (no CVSS)
- [CVE-2008-6019](https://cve.now/CVE-2008-6019.md): SQL injection vulnerability in index.php in EACOMM DO-CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the p parameter. (no CVSS)
- [CVE-2008-6020](https://cve.now/CVE-2008-6020.md): SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-6021](https://cve.now/CVE-2008-6021.md): Multiple unspecified vulnerabilities in Attachmate Reflection for Secure IT UNIX Client and Server before 7.0 SP1 have unknown impact and at (no CVSS)
- [CVE-2008-6022](https://cve.now/CVE-2008-6022.md): PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova, possibly 0.8 sp1, allows remote attac (no CVSS)
- [CVE-2008-6023](https://cve.now/CVE-2008-6023.md): PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in a newer version of Xnova, possibly 0.8 sp1, allows remote attack (no CVSS)
- [CVE-2008-6024](https://cve.now/CVE-2008-6024.md): Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv\_37, when automountd is used, (no CVSS)
- [CVE-2009-0389](https://cve.now/CVE-2009-0389.md): Multiple insecure method vulnerabilities in the Web On Windows (WOW) ActiveX control in WOW ActiveX 2 allow remote attackers to (1) create a (no CVSS)
- [CVE-2009-0382](https://cve.now/CVE-2009-0382.md): Unspecified vulnerability in Internationalization (i18n) Translation 5.x before 5.x-2.5, a module for Drupal, allows remote attackers with " (no CVSS)
- [CVE-2009-0383](https://cve.now/CVE-2009-0383.md): delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct re (no CVSS)
- [CVE-2009-0384](https://cve.now/CVE-2009-0384.md): SQL injection vulnerability in autor.php in OwnRS CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2009-0385](https://cve.now/CVE-2009-0385.md): Integer signedness error in the fourxm\_read\_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to (no CVSS)
- [CVE-2009-0386](https://cve.now/CVE-2009-0386.md): Heap-based buffer overflow in the qtdemux\_parse\_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) (no CVSS, gstreamer-plugins)
- [CVE-2009-0387](https://cve.now/CVE-2009-0387.md): Array index error in the qtdemux\_parse\_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 th (no CVSS, gstreamer-plugins)
- [CVE-2009-0377](https://cve.now/CVE-2009-0377.md): SQL injection vulnerability in the beamospetition (com\_beamospetition) 1.0.12 component for Joomla! allows remote attackers to execute arbit (no CVSS)
- [CVE-2009-0378](https://cve.now/CVE-2009-0378.md): Cross-site scripting (XSS) vulnerability in index.php in the beamospetition (com\_beamospetition) 1.0.12 component for Joomla! allows remote (no CVSS)
- [CVE-2009-0379](https://cve.now/CVE-2009-0379.md): SQL injection vulnerability in the Prince Clan Chess Club (com\_pcchess) component for Joomla! allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2009-0380](https://cve.now/CVE-2009-0380.md): SQL injection vulnerability in the Sigsiu Online Business Index 2 (SOBI2, com\_sobi2) RC 2.8.2 component for Joomla! and Mambo allows remote (no CVSS)
- [CVE-2009-0381](https://cve.now/CVE-2009-0381.md): SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart (com\_prod) 5.0 component for Joomla! allows remote attackers to exe (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.