# CVEs published 2009-02-16

28 CVEs were published on February 16, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0599](https://cve.now/CVE-2009-0599.md): Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (no CVSS)
- [CVE-2009-0600](https://cve.now/CVE-2009-0600.md): Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektroni (no CVSS)
- [CVE-2009-0601](https://cve.now/CVE-2009-0601.md): Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (appl (no CVSS)
- [CVE-2009-0602](https://cve.now/CVE-2009-0602.md): Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a (no CVSS)
- [CVE-2009-0603](https://cve.now/CVE-2009-0603.md): Cross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "ad (no CVSS)
- [CVE-2009-0604](https://cve.now/CVE-2009-0604.md): SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-6154](https://cve.now/CVE-2008-6154.md): SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idca (no CVSS)
- [CVE-2008-6155](https://cve.now/CVE-2008-6155.md): SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl (no CVSS)
- [CVE-2008-6156](https://cve.now/CVE-2008-6156.md): SQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated users to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-6142](https://cve.now/CVE-2008-6142.md): Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPic 0.0.4 and FlexPHPic Pro 0.0.3, and other 0.0.x versions, allow re (no CVSS)
- [CVE-2008-6143](https://cve.now/CVE-2008-6143.md): OwenPoll 1.0 allows remote attackers to bypass authentication and obtain administrative access via a modified account name in the username c (no CVSS)
- [CVE-2008-6144](https://cve.now/CVE-2008-6144.md): Multiple cross-site scripting (XSS) vulnerabilities in the WEC Discussion Forum (wec\_discussion) extension 1.7.0 and earlier for TYPO3 allow (no CVSS)
- [CVE-2008-6145](https://cve.now/CVE-2008-6145.md): Multiple SQL injection vulnerabilities in the WEC Discussion Forum (wec\_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attac (no CVSS)
- [CVE-2008-6146](https://cve.now/CVE-2008-6146.md): SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arb (no CVSS)
- [CVE-2008-6147](https://cve.now/CVE-2008-6147.md): ForumApp 3.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a d (no CVSS)
- [CVE-2008-6148](https://cve.now/CVE-2008-6148.md): SQL injection vulnerability in the Live Ticker (com\_liveticker) module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2008-6149](https://cve.now/CVE-2008-6149.md): SQL injection vulnerability in the mDigg (com\_mdigg) component 2.2.8 for Joomla! allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2008-6150](https://cve.now/CVE-2008-6150.md): SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL commands via the ID p (no CVSS)
- [CVE-2008-6151](https://cve.now/CVE-2008-6151.md): SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbitrary SQL commands via the ID (no CVSS)
- [CVE-2008-6152](https://cve.now/CVE-2008-6152.md): SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary SQL commands via the I (no CVSS)
- [CVE-2008-6153](https://cve.now/CVE-2008-6153.md): SQL injection vulnerability in Photo.asp in Jay Patel Pixel8 Web Photo Album 3.0 allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2009-0592](https://cve.now/CVE-2009-0592.md): Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local file (no CVSS)
- [CVE-2009-0593](https://cve.now/CVE-2009-0593.md): SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via (no CVSS)
- [CVE-2009-0594](https://cve.now/CVE-2009-0594.md): Cross-site scripting (XSS) vulnerability in index.php in phpSkelSite 1.4 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2009-0595](https://cve.now/CVE-2009-0595.md): PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register\_globals is enabled and magic\_quotes\_gpc (no CVSS)
- [CVE-2009-0596](https://cve.now/CVE-2009-0596.md): Directory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register\_globals is enabled, allows remote attackers t (no CVSS)
- [CVE-2009-0597](https://cve.now/CVE-2009-0597.md): SQL injection vulnerability in admin/index.php in w3b\>cms (aka w3blabor CMS) before 3.4.0, when magic\_quotes\_gpc is disabled, allows remote (no CVSS)
- [CVE-2009-0598](https://cve.now/CVE-2009-0598.md): SQL injection vulnerability in index.php in PhpMesFilms 1.0 and 1.8 allows remote attackers to execute arbitrary SQL commands via the id par (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.