# CVEs published 2009-06-08

15 CVEs were published on June 8, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6826](https://cve.now/CVE-2008-6826.md): dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstra (no CVSS)
- [CVE-2008-6827](https://cve.now/CVE-2008-6827.md): The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to ga (no CVSS)
- [CVE-2008-6828](https://cve.now/CVE-2008-6828.md): Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which a (no CVSS)
- [CVE-2008-6829](https://cve.now/CVE-2008-6829.md): VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a LIST command that starts with a "/\\/" (forward slash, backwar (no CVSS)
- [CVE-2008-6830](https://cve.now/CVE-2008-6830.md): The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interf (no CVSS)
- [CVE-2008-6831](https://cve.now/CVE-2008-6831.md): Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA Enterprise Edition 3.13 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-6832](https://cve.now/CVE-2008-6832.md): Cross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authenticati (no CVSS)
- [CVE-2009-2003](https://cve.now/CVE-2009-2003.md): Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1 (no CVSS)
- [CVE-2009-2004](https://cve.now/CVE-2009-2004.md): Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execu (no CVSS)
- [CVE-2009-2005](https://cve.now/CVE-2009-2005.md): Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication (no CVSS)
- [CVE-2009-2006](https://cve.now/CVE-2009-2006.md): Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2009-2007](https://cve.now/CVE-2009-2007.md): Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary (no CVSS)
- [CVE-2009-2008](https://cve.now/CVE-2009-2008.md): Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2009-2009](https://cve.now/CVE-2009-2009.md): Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2009-2010](https://cve.now/CVE-2009-2010.md): Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated users to exe (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.