# CVEs published 2009-02-14

8 CVEs were published on February 14, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6134](https://cve.now/CVE-2008-6134.md): SQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via uns (no CVSS)
- [CVE-2008-6135](https://cve.now/CVE-2008-6135.md): Cross-site scripting (XSS) vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2008-6136](https://cve.now/CVE-2008-6136.md): Unspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to gain privileges as another user or an ad (no CVSS)
- [CVE-2008-6137](https://cve.now/CVE-2008-6137.md): EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions via unknown vectors. (no CVSS)
- [CVE-2008-6138](https://cve.now/CVE-2008-6138.md): PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execut (no CVSS)
- [CVE-2008-6139](https://cve.now/CVE-2008-6139.md): Directory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules Controller 1.1 allows remote attackers to read arbit (no CVSS)
- [CVE-2008-6140](https://cve.now/CVE-2008-6140.md): Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Avaya one-X Desktop Edition 2.1.0.78 allows remote atta (no CVSS)
- [CVE-2008-6141](https://cve.now/CVE-2008-6141.md): Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to cause a denial of service (crash) via a large (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.