# CVEs published 2009-02-19

32 CVEs were published on February 19, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6179](https://cve.now/CVE-2008-6179.md): SQL injection vulnerability in sug\_cat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parent\_id pa (no CVSS)
- [CVE-2008-6180](https://cve.now/CVE-2008-6180.md): SQL injection vulnerability in system/nlb\_user.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to (no CVSS)
- [CVE-2008-6181](https://cve.now/CVE-2008-6181.md): SQL injection vulnerability in the Mad4Joomla Mailforms (com\_mad4joomla) component before 1.1.8.2 for Joomla! allows remote attackers to exe (no CVSS)
- [CVE-2008-6182](https://cve.now/CVE-2008-6182.md): SQL injection vulnerability in the Ignite Gallery (com\_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows remote attackers to e (no CVSS)
- [CVE-2008-6183](https://cve.now/CVE-2008-6183.md): Multiple directory traversal vulnerabilities in index.php in My PHP Indexer 1.0 allow remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-6184](https://cve.now/CVE-2008-6184.md): SQL injection vulnerability in the OwnBiblio (com\_ownbiblio) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2008-6185](https://cve.now/CVE-2008-6185.md): NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service (crash) via multiple POP3 requests with a long PASS (no CVSS)
- [CVE-2008-6186](https://cve.now/CVE-2008-6186.md): Stack-based buffer overflow in RaidenFTPD 2.4 build 3620 allows remote authenticated users to cause a denial of service (crash) or execute a (no CVSS)
- [CVE-2008-6187](https://cve.now/CVE-2008-6187.md): SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-6188](https://cve.now/CVE-2008-6188.md): SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2008-6189](https://cve.now/CVE-2008-6189.md): SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/i (no CVSS)
- [CVE-2008-6190](https://cve.now/CVE-2008-6190.md): Cross-site scripting (XSS) vulnerability in index.php in EEBCMS 0.95 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-6191](https://cve.now/CVE-2008-6191.md): Conductor.exe in Intrinsic Swimage Encore before 5.0.1.21 contains a hardcoded password, which might allow local users to decrypt certain .b (no CVSS)
- [CVE-2008-6192](https://cve.now/CVE-2008-6192.md): Multiple cross-site scripting (XSS) vulnerabilities in unspecified Portlets in Sun Java System Portal Server 7.0 and 7.1 allow remote attack (no CVSS)
- [CVE-2008-6193](https://cve.now/CVE-2008-6193.md): Sam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information. (no CVSS)
- [CVE-2008-6194](https://cve.now/CVE-2008-6194.md): Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service (memory consumption) via DNS packets (no CVSS)
- [CVE-2008-4392](https://cve.now/CVE-2008-4392.md): dnscache in Daniel J. (no CVSS)
- [CVE-2008-6172](https://cve.now/CVE-2008-6172.md): Directory traversal vulnerability in captcha/captcha\_image.php in the RWCards (com\_rwcards) 3.0.11 component for Joomla!, when magic\_quotes\_ (no CVSS)
- [CVE-2008-6173](https://cve.now/CVE-2008-6173.md): Cross-site scripting (XSS) vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2008-6174](https://cve.now/CVE-2008-6174.md): Cross-site scripting (XSS) vulnerability in admin/postlister/index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-6175](https://cve.now/CVE-2008-6175.md): SilverSHielD 1.0.2.34 allows remote attackers to cause a denial of service (application crash) via a crafted argument to the opendir SFTP co (no CVSS)
- [CVE-2008-6177](https://cve.now/CVE-2008-6177.md): Multiple directory traversal vulnerabilities in LightBlog 9.8, when magic\_quotes\_gpc is disabled, allow remote attackers to include and exec (no CVSS)
- [CVE-2008-6178](https://cve.now/CVE-2008-6178.md): Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4 (no CVSS)
- [CVE-2009-0647](https://cve.now/CVE-2009-0647.md): msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denia (no CVSS)
- [CVE-2009-0648](https://cve.now/CVE-2009-0648.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the manage\_users handler in admin/index.php in Falt4 CMS (aka Falt4 Extreme) R (no CVSS)
- [CVE-2008-6167](https://cve.now/CVE-2008-6167.md): Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and execute arbitrary loca (no CVSS)
- [CVE-2008-6168](https://cve.now/CVE-2008-6168.md): Cross-site scripting (XSS) vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-6169](https://cve.now/CVE-2008-6169.md): Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization se (no CVSS)
- [CVE-2008-6170](https://cve.now/CVE-2008-6170.md): Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book con (no CVSS)
- [CVE-2008-6171](https://cve.now/CVE-2008-6171.md): includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remo (no CVSS)
- [CVE-2008-6165](https://cve.now/CVE-2008-6165.md): SQL injection vulnerability in gestion.php in CSPartner 0.1, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-6166](https://cve.now/CVE-2008-6166.md): SQL injection vulnerability in the KBase (com\_kbase) 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.