# CVEs published 2009-03-13

21 CVEs were published on March 13, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6451](https://cve.now/CVE-2008-6451.md): SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2008-6452](https://cve.now/CVE-2008-6452.md): SQL injection vulnerability in show\_vote.php in Oceandir 2.9 and earlier allows remote attackers to execute arbitrary SQL commands via the i (no CVSS)
- [CVE-2008-6453](https://cve.now/CVE-2008-6453.md): Directory traversal vulnerability in section.php in 6rbScript 3.3, when magic\_quotes\_gpc is disabled, allows remote attackers to read arbitr (no CVSS)
- [CVE-2008-6454](https://cve.now/CVE-2008-6454.md): SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid param (no CVSS)
- [CVE-2008-6455](https://cve.now/CVE-2008-6455.md): Session fixation vulnerability in Edikon phpShop 0.8.1 allows remote attackers to hijack web sessions via unspecified vectors. (no CVSS)
- [CVE-2008-6456](https://cve.now/CVE-2008-6456.md): SQL injection vulnerability in the HBook (h\_book) extension 2.3.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2008-6457](https://cve.now/CVE-2008-6457.md): SQL injection vulnerability in the Swigmore institute (cgswigmore) extension before 0.1.2 for TYPO3 allows remote attackers to execute arbit (no CVSS)
- [CVE-2008-6458](https://cve.now/CVE-2008-6458.md): SQL injection vulnerability in the FE address edit for tt\_address & direct mail (dmaddredit) extension 0.4.0 and earlier for TYPO3 allows re (no CVSS)
- [CVE-2008-6459](https://cve.now/CVE-2008-6459.md): SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows remote attackers to e (no CVSS)
- [CVE-2008-6460](https://cve.now/CVE-2008-6460.md): SQL injection vulnerability in the Simple Random Objects (mw\_random\_objects) extension 1.0.3 and earlier for TYPO3 allows remote attackers t (no CVSS)
- [CVE-2008-6461](https://cve.now/CVE-2008-6461.md): SQL injection vulnerability in the Random Prayer 2 (ste\_prayer2) extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2008-6462](https://cve.now/CVE-2008-6462.md): SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2008-6463](https://cve.now/CVE-2008-6463.md): SQL injection vulnerability in the Diocese of Portsmouth Church Search (pd\_churchsearch) extension before 0.1.1, and 0.2.10 and earlier 0.2. (no CVSS)
- [CVE-2008-6464](https://cve.now/CVE-2008-6464.md): SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2008-6465](https://cve.now/CVE-2008-6465.md): Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attacke (no CVSS)
- [CVE-2008-6466](https://cve.now/CVE-2008-6466.md): SQL injection vulnerability in image\_gallery.php in the Akira Powered Image Gallery (image\_gallery) plugin 0.9.6.2 for e107 allows remote at (no CVSS)
- [CVE-2008-6467](https://cve.now/CVE-2008-6467.md): SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-6468](https://cve.now/CVE-2008-6468.md): SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the area parameter in a (no CVSS)
- [CVE-2008-6469](https://cve.now/CVE-2008-6469.md): SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands via the p parameter. (no CVSS)
- [CVE-2008-6470](https://cve.now/CVE-2008-6470.md): Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive information, and possibly have (no CVSS)
- [CVE-2008-6471](https://cve.now/CVE-2008-6471.md): SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-03-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.