# CVEs published 2009-04-29

23 CVEs were published on April 29, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6768](https://cve.now/CVE-2008-6768.md): Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2008-6769](https://cve.now/CVE-2008-6769.md): Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary c (no CVSS)
- [CVE-2008-6770](https://cve.now/CVE-2008-6770.md): YourPlace 1.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers (no CVSS)
- [CVE-2008-6771](https://cve.now/CVE-2008-6771.md): YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a direct request to user (no CVSS)
- [CVE-2008-6772](https://cve.now/CVE-2008-6772.md): login/register\_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which al (no CVSS)
- [CVE-2008-6773](https://cve.now/CVE-2008-6773.md): Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to exe (no CVSS)
- [CVE-2008-6774](https://cve.now/CVE-2008-6774.md): internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, which allows remote att (no CVSS)
- [CVE-2009-1480](https://cve.now/CVE-2009-1480.md): SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via the fileget paramet (no CVSS)
- [CVE-2009-1481](https://cve.now/CVE-2009-1481.md): SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2009-1482](https://cve.now/CVE-2009-1482.md): Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject a (no CVSS, moin)
- [CVE-2009-1483](https://cve.now/CVE-2009-1483.md): Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, al (no CVSS)
- [CVE-2009-1484](https://cve.now/CVE-2009-1484.md): Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arb (no CVSS)
- [CVE-2009-1485](https://cve.now/CVE-2009-1485.md): The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of service (infinite loop) via unspecified attack ve (no CVSS)
- [CVE-2009-1486](https://cve.now/CVE-2009-1486.md): Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitrary local files via a (no CVSS)
- [CVE-2009-1487](https://cve.now/CVE-2009-1487.md): SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the login\_user (no CVSS)
- [CVE-2009-1488](https://cve.now/CVE-2009-1488.md): Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via (no CVSS)
- [CVE-2009-1489](https://cve.now/CVE-2009-1489.md): includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie (no CVSS)
- [CVE-2009-0719](https://cve.now/CVE-2009-0719.md): Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories (no CVSS)
- [CVE-2009-1428](https://cve.now/CVE-2009-1428.md): Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 1 (no CVSS)
- [CVE-2009-1429](https://cve.now/CVE-2009-1429.md): The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec An (no CVSS)
- [CVE-2009-1430](https://cve.now/CVE-2009-1430.md): Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used (no CVSS)
- [CVE-2009-1431](https://cve.now/CVE-2009-1431.md): XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (S (no CVSS)
- [CVE-2009-1478](https://cve.now/CVE-2009-1478.md): Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv\_114, allow local users to ca (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.