# CVEs published 2009-05-16

8 CVEs were published on May 16, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-1649](https://cve.now/CVE-2009-1649.md): Directory traversal vulnerability in arch.php in beLive 0.2.3 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2009-1650](https://cve.now/CVE-2009-1650.md): Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) a (no CVSS)
- [CVE-2009-1651](https://cve.now/CVE-2009-1651.md): SQL injection vulnerability in admin/member\_details.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2009-1652](https://cve.now/CVE-2009-1652.md): admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileg (no CVSS)
- [CVE-2009-1653](https://cve.now/CVE-2009-1653.md): Directory traversal vulnerability in examples/tbs\_us\_examples\_0view.php in TinyButStrong 3.4.0 allows remote attackers to read arbitrary fil (no CVSS)
- [CVE-2009-1654](https://cve.now/CVE-2009-1654.md): Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote attackers to inject (no CVSS)
- [CVE-2009-1655](https://cve.now/CVE-2009-1655.md): Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execu (no CVSS)
- [CVE-2009-1656](https://cve.now/CVE-2009-1656.md): Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-05-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.