# CVEs published 2009-02-21

6 CVEs were published on February 21, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6235](https://cve.now/CVE-2008-6235.md): The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a f (no CVSS)
- [CVE-2008-6236](https://cve.now/CVE-2008-6236.md): SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote at (no CVSS)
- [CVE-2008-3074](https://cve.now/CVE-2008-3074.md): The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (ex (no CVSS)
- [CVE-2008-3075](https://cve.now/CVE-2008-3075.md): The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (ex (no CVSS)
- [CVE-2008-3076](https://cve.now/CVE-2008-3076.md): The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filena (no CVSS)
- [CVE-2008-6234](https://cve.now/CVE-2008-6234.md): SQL injection vulnerability in the com\_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.