# CVEs published 2009-02-11

34 CVEs were published on February 11, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0036](https://cve.now/CVE-2009-0036.md): Buffer overflow in the proxyReadClientSocket function in proxy/libvirt\_proxy.c in libvirt\_proxy 0.5.1 might allow local users to gain privil (no CVSS)
- [CVE-2009-0525](https://cve.now/CVE-2009-0525.md): Cross-site scripting (XSS) vulnerability in the sajax\_get\_common\_js function in php/Sajax.php in Sajax 0.12 allows remote attackers to injec (no CVSS)
- [CVE-2009-0526](https://cve.now/CVE-2009-0526.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2009-0527](https://cve.now/CVE-2009-0527.md): PHP remote file inclusion vulnerability in plugins/rss\_importer\_functions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2009-0528](https://cve.now/CVE-2009-0528.md): SQL injection vulnerability in frame.php in Rhadrix If-CMS 2.07 and earlier allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2009-0529](https://cve.now/CVE-2009-0529.md): Cross-site scripting (XSS) vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2009-0530](https://cve.now/CVE-2009-0530.md): Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when register\_globals is enabled, allow remote attackers to execu (no CVSS)
- [CVE-2009-0531](https://cve.now/CVE-2009-0531.md): SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote attackers to execute arb (no CVSS)
- [CVE-2009-0532](https://cve.now/CVE-2009-0532.md): Cross-site scripting (XSS) vulnerability in password.php in Scripts For Sites (SFS) EZ Baby allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2009-0533](https://cve.now/CVE-2009-0533.md): Cross-site scripting (XSS) vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2009-0534](https://cve.now/CVE-2009-0534.md): SQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands via the catId parameter. (no CVSS)
- [CVE-2009-0535](https://cve.now/CVE-2009-0535.md): Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register\_globals is disabled, allows remote attackers to read (no CVSS)
- [CVE-2009-0536](https://cve.now/CVE-2009-0536.md): at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified (no CVSS)
- [CVE-2008-6111](https://cve.now/CVE-2008-6111.md): SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQL commands via the no (no CVSS)
- [CVE-2008-6112](https://cve.now/CVE-2008-6112.md): Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-6113](https://cve.now/CVE-2008-6113.md): Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.90 allows remote attackers to inject arbitrary web script or HTML via u (no CVSS)
- [CVE-2008-6114](https://cve.now/CVE-2008-6114.md): SQL injection vulnerability in product\_details.php in the Mytipper Zogo-shop 1.15.4 plugin for e107 allows remote attackers to execute arbit (no CVSS)
- [CVE-2008-6115](https://cve.now/CVE-2008-6115.md): SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2008-6116](https://cve.now/CVE-2008-6116.md): SQL injection vulnerability in the EXtrovert Software Thyme (com\_thyme) 1.0 component for Joomla! allows remote attackers to execute arbitra (no CVSS)
- [CVE-2008-6117](https://cve.now/CVE-2008-6117.md): SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the poll\_view\_i (no CVSS)
- [CVE-2008-6118](https://cve.now/CVE-2008-6118.md): win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative access by setting the logg (no CVSS)
- [CVE-2008-6119](https://cve.now/CVE-2008-6119.md): Static code injection vulnerability in gooplecms/admin/account/action/editpass.php in Goople CMS 1.7 allows remote attackers to inject arbit (no CVSS)
- [CVE-2008-6120](https://cve.now/CVE-2008-6120.md): SQL injection vulnerability in profile\_comments.php in SocialEngine (SE) 2.7 and earlier allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2008-6121](https://cve.now/CVE-2008-6121.md): CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP (no CVSS)
- [CVE-2008-6122](https://cve.now/CVE-2008-6122.md): The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service (crash) via a request that contains a (no CVSS)
- [CVE-2008-6110](https://cve.now/CVE-2008-6110.md): Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper validation of parameters (no CVSS)
- [CVE-2008-6109](https://cve.now/CVE-2008-6109.md): Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local (no CVSS)
- [CVE-2009-0455](https://cve.now/CVE-2009-0455.md): Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions (no CVSS)
- [CVE-2009-0475](https://cve.now/CVE-2009-0475.md): Integer underflow in the Huffman decoding functionality (pvmp3\_huffman\_parsing.cpp) in OpenCORE 2.0 and earlier allows remote attackers to c (no CVSS)
- [CVE-2009-0513](https://cve.now/CVE-2009-0513.md): Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the cl (no CVSS)
- [CVE-2009-0514](https://cve.now/CVE-2009-0514.md): Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via direct (no CVSS)
- [CVE-2009-0515](https://cve.now/CVE-2009-0515.md): Directory traversal vulnerability in check\_lang.php in Yet Another NOCC (YANOCC) 0.1.0 and earlier allows remote attackers to include and ex (no CVSS)
- [CVE-2009-0516](https://cve.now/CVE-2009-0516.md): SQL injection vulnerability in the classified page (classified.php) in BusinessSpace 1.2 and earlier allows remote attackers to execute arbi (no CVSS)
- [CVE-2009-0517](https://cve.now/CVE-2009-0517.md): Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code via the fiel (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.