# CVEs published 2009-02-27

45 CVEs were published on February 27, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6333](https://cve.now/CVE-2008-6333.md): SQL injection vulnerability in news.php in RSS Simple News (RSSSN), when magic\_quotes\_gpc is disabled, allows remote attackers to execute ar (no CVSS)
- [CVE-2008-6334](https://cve.now/CVE-2008-6334.md): Directory traversal vulnerability in download.php in eMetrix Extract Website allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-6335](https://cve.now/CVE-2008-6335.md): Directory traversal vulnerability in download.php in eMetrix Online Keyword Research Tool allows remote attackers to read arbitrary files vi (no CVSS)
- [CVE-2008-6336](https://cve.now/CVE-2008-6336.md): Directory traversal vulnerability in download.php in Text Lines Rearrange Script 1.0, when register\_globals is enabled, allows remote attack (no CVSS)
- [CVE-2008-6337](https://cve.now/CVE-2008-6337.md): SQL injection vulnerability in the Volunteer Management System (com\_volunteer) module 2.0 for Joomla! allows remote attackers to execute arb (no CVSS)
- [CVE-2008-6338](https://cve.now/CVE-2008-6338.md): SQL injection vulnerability in the WEBERkommunal Facilities (wes\_facilities) extension 2.0 for TYPO3 allows remote attackers to execute arbi (no CVSS)
- [CVE-2008-6340](https://cve.now/CVE-2008-6340.md): Cross-site scripting (XSS) vulnerability in the Vox populi (mv\_vox\_populi) extension 0.3.0 and earlier for TYPO3 allows remote attackers to (no CVSS)
- [CVE-2008-6341](https://cve.now/CVE-2008-6341.md): Cross-site scripting (XSS) vulnerability in the SB Universal Plugin (SBuniplug) extension 2.0.1 and earlier for TYPO3 allows remote attacker (no CVSS)
- [CVE-2008-6342](https://cve.now/CVE-2008-6342.md): Unspecified vulnerability in the TYPO3 Simple File Browser (simplefilebrowser) extension 1.0.2 and earlier allows remote attackers to obtain (no CVSS)
- [CVE-2008-6343](https://cve.now/CVE-2008-6343.md): Cross-site scripting (XSS) vulnerability in the TU-Clausthal ODIN (tuc\_odin) extension 0.0.1, 0.1.0, 0.1.1, and 0.2.0 for TYPO3 allows remot (no CVSS)
- [CVE-2008-6344](https://cve.now/CVE-2008-6344.md): SQL injection vulnerability in the TU-Clausthal Staff (tuc\_staff) 0.3.0 and earlier extension for TYPO3 allows remote attackers to execute a (no CVSS)
- [CVE-2008-6345](https://cve.now/CVE-2008-6345.md): SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cat pa (no CVSS)
- [CVE-2008-6346](https://cve.now/CVE-2008-6346.md): Cross-site scripting (XSS) vulnerability in the DR Wiki (dr\_wiki) extension 1.7.1 and earlier for TYPO3 allows remote attackers to inject ar (no CVSS)
- [CVE-2009-0028](https://cve.now/CVE-2009-0028.md): The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unpriv (no CVSS)
- [CVE-2009-0743](https://cve.now/CVE-2009-0743.md): Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 befor (no CVSS)
- [CVE-2009-0744](https://cve.now/CVE-2009-0744.md): Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a (no CVSS)
- [CVE-2009-0745](https://cve.now/CVE-2009-0745.md): The ext4\_group\_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly ini (no CVSS)
- [CVE-2009-0746](https://cve.now/CVE-2009-0746.md): The make\_indexed\_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a (no CVSS)
- [CVE-2009-0747](https://cve.now/CVE-2009-0747.md): The ext4\_isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the i\_size\_high struct (no CVSS)
- [CVE-2009-0748](https://cve.now/CVE-2009-0748.md): The ext4\_fill\_super function in fs/ext4/super.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate the (no CVSS)
- [CVE-2008-6329](https://cve.now/CVE-2008-6329.md): SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2008-6330](https://cve.now/CVE-2008-6330.md): SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-6331](https://cve.now/CVE-2008-6331.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Streber before 0.08093 allow remote attackers to hijack the authentication of (no CVSS)
- [CVE-2008-6332](https://cve.now/CVE-2008-6332.md): SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password p (no CVSS)
- [CVE-2008-6311](https://cve.now/CVE-2008-6311.md): SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytab (no CVSS)
- [CVE-2008-6312](https://cve.now/CVE-2008-6312.md): SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter (no CVSS)
- [CVE-2008-6313](https://cve.now/CVE-2008-6313.md): Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magic\_quotes\_gpc is disabled, allows remote attackers to inc (no CVSS)
- [CVE-2008-6314](https://cve.now/CVE-2008-6314.md): SQL injection vulnerability in tag\_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-6315](https://cve.now/CVE-2008-6315.md): PHP remote file inclusion vulnerability in \_conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to execute arbit (no CVSS)
- [CVE-2008-6316](https://cve.now/CVE-2008-6316.md): Directory traversal vulnerability in \_conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to include and execute (no CVSS)
- [CVE-2008-6317](https://cve.now/CVE-2008-6317.md): Directory traversal vulnerability in \_conf/\_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to include and exe (no CVSS)
- [CVE-2008-6318](https://cve.now/CVE-2008-6318.md): PHP remote file inclusion vulnerability in \_conf/\_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to execute a (no CVSS)
- [CVE-2008-6319](https://cve.now/CVE-2008-6319.md): SQL injection vulnerability in calendarevent.cfm in CF\_Calendar allows remote attackers to execute arbitrary SQL commands via the calid para (no CVSS)
- [CVE-2008-6320](https://cve.now/CVE-2008-6320.md): SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category par (no CVSS)
- [CVE-2008-6321](https://cve.now/CVE-2008-6321.md): CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensi (no CVSS)
- [CVE-2008-6322](https://cve.now/CVE-2008-6322.md): SQL injection vulnerability in index.cfm in CFMSource CFMBlog allows remote attackers to execute arbitrary SQL commands via the categorynbr (no CVSS)
- [CVE-2008-6323](https://cve.now/CVE-2008-6323.md): SQL injection vulnerability in forummessages.cfm in CFMSource CF\_Auction allows remote attackers to execute arbitrary SQL commands via the c (no CVSS)
- [CVE-2008-6324](https://cve.now/CVE-2008-6324.md): SQL injection vulnerability in forummessages.cfm in CF\_Forum allows remote attackers to execute arbitrary SQL commands via the categorynbr p (no CVSS)
- [CVE-2008-6325](https://cve.now/CVE-2008-6325.md): Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2008-6326](https://cve.now/CVE-2008-6326.md): SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2008-6327](https://cve.now/CVE-2008-6327.md): SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter (no CVSS)
- [CVE-2008-6328](https://cve.now/CVE-2008-6328.md): SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-6308](https://cve.now/CVE-2008-6308.md): Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote attackers to include (no CVSS)
- [CVE-2008-6309](https://cve.now/CVE-2008-6309.md): SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands via the f\[password\] p (no CVSS)
- [CVE-2008-6310](https://cve.now/CVE-2008-6310.md): SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL commands via the f\[passwo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.