# CVEs published 2009-02-09 19 CVEs were published on February 9, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-0487](https://cve.now/CVE-2009-0487.md): Cross-site scripting (XSS) vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted (no CVSS) - [CVE-2009-0488](https://cve.now/CVE-2009-0488.md): Cross-site scripting (XSS) vulnerability in Phorum before 5.2.10 allows remote attackers to inject arbitrary web script or HTML via unspecif (no CVSS) - [CVE-2009-0489](https://cve.now/CVE-2009-0489.md): The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive message (no CVSS) - [CVE-2008-6098](https://cve.now/CVE-2008-6098.md): Bugzilla 3.2 before 3.2 RC2, 3.0 before 3.0.6, 2.22 before 2.22.6, 2.20 before 2.20.7, and other versions after 2.17.4 allows remote authent (no CVSS) - [CVE-2008-6091](https://cve.now/CVE-2008-6091.md): SQL injection vulnerability in plugins.php in BMForum 5.6, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary S (no CVSS) - [CVE-2008-6092](https://cve.now/CVE-2008-6092.md): phpscripts Ranking Script allows remote attackers to bypass authentication and gain administrative access by sending an admin=ja cookie. (no CVSS) - [CVE-2008-6093](https://cve.now/CVE-2008-6093.md): SQL injection vulnerability in index.php in Noname CMS 1.0, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary (no CVSS) - [CVE-2008-6094](https://cve.now/CVE-2008-6094.md): Cross-site scripting (XSS) vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2008-6095](https://cve.now/CVE-2008-6095.md): Cross-site scripting (XSS) vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2008-6096](https://cve.now/CVE-2008-6096.md): Cross-site scripting (XSS) vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arb (no CVSS) - [CVE-2008-6097](https://cve.now/CVE-2008-6097.md): Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2009-0481](https://cve.now/CVE-2009-0481.md): Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site (no CVSS) - [CVE-2009-0482](https://cve.now/CVE-2009-0482.md): Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows (no CVSS) - [CVE-2009-0483](https://cve.now/CVE-2009-0483.md): Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.22 before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 all (no CVSS) - [CVE-2009-0484](https://cve.now/CVE-2009-0484.md): Cross-site request forgery (CSRF) vulnerability in Bugzilla 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers (no CVSS) - [CVE-2009-0485](https://cve.now/CVE-2009-0485.md): Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.17 to 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows (no CVSS) - [CVE-2009-0486](https://cve.now/CVE-2009-0486.md): Bugzilla 3.2.1, 3.0.7, and 3.3.2, when running under mod\_perl, calls the srand function at startup time, which causes Apache children to hav (no CVSS) - [CVE-2009-0480](https://cve.now/CVE-2009-0480.md): The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv\_82, uses an improper arena when allocating minor numbers for s (no CVSS) - [CVE-2009-0479](https://cve.now/CVE-2009-0479.md): Multiple SQL injection vulnerabilities in admin/admin\_login.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL comma (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-02-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.