# CVEs published 2009-02-06

50 CVEs were published on February 6, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2002-2427](https://cve.now/CVE-2002-2427.md): The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web c (no CVSS)
- [CVE-2002-2428](https://cve.now/CVE-2002-2428.md): webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) vi (no CVSS)
- [CVE-2002-2429](https://cve.now/CVE-2002-2429.md): webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that c (no CVSS)
- [CVE-2002-2430](https://cve.now/CVE-2002-2430.md): GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to t (no CVSS)
- [CVE-2002-2431](https://cve.now/CVE-2002-2431.md): Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious cod (no CVSS)
- [CVE-2003-1568](https://cve.now/CVE-2003-1568.md): GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an inval (no CVSS)
- [CVE-2003-1569](https://cve.now/CVE-2003-1569.md): GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP req (no CVSS)
- [CVE-2008-6086](https://cve.now/CVE-2008-6086.md): SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id paramet (no CVSS)
- [CVE-2008-6087](https://cve.now/CVE-2008-6087.md): Cross-site scripting (XSS) vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-6088](https://cve.now/CVE-2008-6088.md): SQL injection vulnerability in the Joomtracker (com\_joomtracker) 1.01 module for Joomla! allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2008-6089](https://cve.now/CVE-2008-6089.md): Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-6090](https://cve.now/CVE-2008-6090.md): Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a (no CVSS)
- [CVE-2009-0470](https://cve.now/CVE-2009-0470.md): Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2009-0471](https://cve.now/CVE-2009-0471.md): Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to execute arbitrary comman (no CVSS)
- [CVE-2009-0472](https://cve.now/CVE-2009-0472.md): Multiple cross-site scripting (XSS) vulnerabilities in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bri (no CVSS)
- [CVE-2009-0473](https://cve.now/CVE-2009-0473.md): Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote (no CVSS)
- [CVE-2009-0474](https://cve.now/CVE-2009-0474.md): The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal (no CVSS)
- [CVE-2008-6074](https://cve.now/CVE-2008-6074.md): Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to inc (no CVSS)
- [CVE-2008-6075](https://cve.now/CVE-2008-6075.md): SQL injection vulnerability in aspkat.asp in Bahar Download Script 2.0 allows remote attackers to execute arbitrary SQL commands via the kid (no CVSS)
- [CVE-2008-6076](https://cve.now/CVE-2008-6076.md): SQL injection vulnerability in the Daily Message (com\_dailymessage) 1.0.3 component for Joomla! allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-6077](https://cve.now/CVE-2008-6077.md): SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to execute arbitrary SQL c (no CVSS)
- [CVE-2008-6078](https://cve.now/CVE-2008-6078.md): SQL injection vulnerability in open.php in the Private Messaging (com\_privmsg) component for Limbo CMS allows remote attackers to execute ar (no CVSS)
- [CVE-2008-6079](https://cve.now/CVE-2008-6079.md): imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) (no CVSS)
- [CVE-2008-6080](https://cve.now/CVE-2008-6080.md): Directory traversal vulnerability in download.php in the ionFiles (com\_ionfiles) 4.4.2 component for Joomla! allows remote attackers to read (no CVSS)
- [CVE-2008-6081](https://cve.now/CVE-2008-6081.md): SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id param (no CVSS)
- [CVE-2008-6082](https://cve.now/CVE-2008-6082.md): Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO command. (no CVSS)
- [CVE-2008-6083](https://cve.now/CVE-2008-6083.md): Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbitrary local files via (no CVSS)
- [CVE-2008-6084](https://cve.now/CVE-2008-6084.md): Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2008-6085](https://cve.now/CVE-2008-6085.md): Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and (no CVSS)
- [CVE-2008-6068](https://cve.now/CVE-2008-6068.md): SQL injection vulnerability in the JoomlaDate (com\_joomladate) component 1.2 for Joomla! allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2008-6069](https://cve.now/CVE-2008-6069.md): SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic\_quotes\_gpc is disabled, allows remote attackers to (no CVSS)
- [CVE-2008-6070](https://cve.now/CVE-2008-6070.md): Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers t (no CVSS)
- [CVE-2008-6071](https://cve.now/CVE-2008-6071.md): Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remo (no CVSS)
- [CVE-2008-6072](https://cve.now/CVE-2008-6072.md): Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to cause a denial of se (no CVSS)
- [CVE-2008-6073](https://cve.now/CVE-2008-6073.md): StorageCrypt 2.0.1 does not properly encrypt disks, which allows local users to obtain sensitive information via unspecified vectors. (no CVSS)
- [CVE-2009-0456](https://cve.now/CVE-2009-0456.md): PHP remote file inclusion vulnerability in examples/example\_clientside\_javascript.php in patForms, as used in Sourdough 0.3.5, allows remote (no CVSS)
- [CVE-2009-0457](https://cve.now/CVE-2009-0457.md): Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via direc (no CVSS)
- [CVE-2009-0458](https://cve.now/CVE-2009-0458.md): Multiple SQL injection vulnerabilities in admin/login\_submit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary S (no CVSS)
- [CVE-2009-0459](https://cve.now/CVE-2009-0459.md): Multiple SQL injection vulnerabilities in admin/login\_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remote attackers to execu (no CVSS)
- [CVE-2009-0460](https://cve.now/CVE-2009-0460.md): Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adm (no CVSS)
- [CVE-2009-0461](https://cve.now/CVE-2009-0461.md): Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer va (no CVSS)
- [CVE-2009-0462](https://cve.now/CVE-2009-0462.md): Multiple SQL injection vulnerabilities in customer\_login\_check.asp in ClickTech ClickCart 6.0 allow remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2009-0463](https://cve.now/CVE-2009-0463.md): PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2009-0464](https://cve.now/CVE-2009-0464.md): PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2009-0465](https://cve.now/CVE-2009-0465.md): The SaveDoc method in the All\_In\_The\_Box.AllBox ActiveX control in ALL\_IN\_THE\_BOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote att (no CVSS)
- [CVE-2009-0466](https://cve.now/CVE-2009-0466.md): Cross-site scripting (XSS) vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI (no CVSS)
- [CVE-2009-0467](https://cve.now/CVE-2009-0467.md): Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to injec (no CVSS)
- [CVE-2009-0468](https://cve.now/CVE-2009-0468.md): Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote at (no CVSS)
- [CVE-2009-0469](https://cve.now/CVE-2009-0469.md): Unspecified vulnerability in futomi's CGI Cafe Fulltext search CGI 1.1.2 allows remote attackers to gain administrative privileges via unkno (no CVSS)
- [CVE-2009-0417](https://cve.now/CVE-2009-0417.md): Cross-site scripting (XSS) vulnerability in the AgaviWebRouting::gen(null) method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 al (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.