# CVEs published 2009-03-06

41 CVEs were published on March 6, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6416](https://cve.now/CVE-2008-6416.md): Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2008-6417](https://cve.now/CVE-2008-6417.md): Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the "installation directory" via unknown vectors. (no CVSS)
- [CVE-2008-6418](https://cve.now/CVE-2008-6418.md): SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2008-6419](https://cve.now/CVE-2008-6419.md): Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary SQL commands via the ( (no CVSS)
- [CVE-2008-6420](https://cve.now/CVE-2008-6420.md): Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload.php, (2) webadmin/do (no CVSS)
- [CVE-2008-6421](https://cve.now/CVE-2008-6421.md): PHP remote file inclusion vulnerability in social\_game\_play.php in Social Site Generator (SSG) 2.0 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2008-6422](https://cve.now/CVE-2008-6422.md): Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-6423](https://cve.now/CVE-2008-6423.md): Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read arbitrary local files v (no CVSS)
- [CVE-2008-6424](https://cve.now/CVE-2008-6424.md): Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP L (no CVSS)
- [CVE-2008-6425](https://cve.now/CVE-2008-6425.md): SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via the news\_id paramete (no CVSS)
- [CVE-2008-6427](https://cve.now/CVE-2008-6427.md): SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magic\_quotes\_gpc is disabled, allows remote attac (no CVSS)
- [CVE-2008-6428](https://cve.now/CVE-2008-6428.md): The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via (no CVSS)
- [CVE-2008-6429](https://cve.now/CVE-2008-6429.md): SQL injection vulnerability in the PrayerCenter (com\_prayercenter) component 1.4.9 and earlier for Joomla! allows remote attackers to execut (no CVSS)
- [CVE-2008-6430](https://cve.now/CVE-2008-6430.md): SQL injection vulnerability in the MyContent (com\_mycontent) component 1.1.13 for Joomla! allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2008-6431](https://cve.now/CVE-2008-6431.md): Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS)
- [CVE-2008-6433](https://cve.now/CVE-2008-6433.md): Cross-site scripting (XSS) vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inj (no CVSS)
- [CVE-2008-6434](https://cve.now/CVE-2008-6434.md): SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2008-6435](https://cve.now/CVE-2008-6435.md): Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2008-6436](https://cve.now/CVE-2008-6436.md): Cross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject (no CVSS)
- [CVE-2008-6437](https://cve.now/CVE-2008-6437.md): Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2008-6438](https://cve.now/CVE-2008-6438.md): SQL injection vulnerability in macgurublog\_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to ex (no CVSS)
- [CVE-2008-6439](https://cve.now/CVE-2008-6439.md): Cross-site scripting (XSS) vulnerability in search\_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2008-6440](https://cve.now/CVE-2008-6440.md): Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... (no CVSS)
- [CVE-2009-0838](https://cve.now/CVE-2009-0838.md): The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv\_88 through snv\_102, does not properly free memory, which allows local (no CVSS)
- [CVE-2008-6401](https://cve.now/CVE-2008-6401.md): SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute arbitrary SQL commands via the kat parameter. (no CVSS)
- [CVE-2008-6402](https://cve.now/CVE-2008-6402.md): PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows remote attackers to e (no CVSS)
- [CVE-2008-6403](https://cve.now/CVE-2008-6403.md): PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier allows remote attacke (no CVSS)
- [CVE-2008-6404](https://cve.now/CVE-2008-6404.md): Cross-site scripting (XSS) vulnerability in add\_calendars.php in eXtrovert Software Thyme 1.3 allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2008-6405](https://cve.now/CVE-2008-6405.md): SQL injection vulnerability in showcategory.php in Hotscripts Clone allows remote attackers to execute arbitrary SQL commands via the cid pa (no CVSS)
- [CVE-2008-6406](https://cve.now/CVE-2008-6406.md): Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-6407](https://cve.now/CVE-2008-6407.md): Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local (no CVSS)
- [CVE-2008-6408](https://cve.now/CVE-2008-6408.md): PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2008-6409](https://cve.now/CVE-2008-6409.md): SQL injection vulnerability in index.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2008-6410](https://cve.now/CVE-2008-6410.md): Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to include and execute arbit (no CVSS)
- [CVE-2008-6411](https://cve.now/CVE-2008-6411.md): Explay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the login cookie to 1. (no CVSS)
- [CVE-2008-6412](https://cve.now/CVE-2008-6412.md): Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5 allows "low privileged" users to gain adminis (no CVSS)
- [CVE-2008-6413](https://cve.now/CVE-2008-6413.md): Cross-site scripting (XSS) vulnerability in the Answers module 5.x-1.x-dev and possibly other 5.x versions, a module for Drupal, allows remo (no CVSS)
- [CVE-2008-6414](https://cve.now/CVE-2008-6414.md): SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-6415](https://cve.now/CVE-2008-6415.md): Buffer overflow in YoungZSoft CCProxy 6.5 might allow remote attackers to execute arbitrary code via a CONNECTION request with a long hostna (no CVSS)
- [CVE-2009-0834](https://cve.now/CVE-2009-0834.md): The audit\_syscall\_entry function in the Linux kernel 2.6.28.7 and earlier on the x86\_64 platform does not properly handle (1) a 32-bit proce (no CVSS)
- [CVE-2009-0835](https://cve.now/CVE-2009-0835.md): The \_\_secure\_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86\_64 platform (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-03-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.