# CVEs published 2009-06-09

19 CVEs were published on June 9, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2475](https://cve.now/CVE-2008-2475.md): eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arbitrary commands via t (no CVSS)
- [CVE-2009-1296](https://cve.now/CVE-2009-1296.md): The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might a (no CVSS)
- [CVE-2009-2013](https://cve.now/CVE-2009-2013.md): SQL injection vulnerability in bin/aps\_browse\_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2009-2014](https://cve.now/CVE-2009-2014.md): SQL injection vulnerability in the ComSchool (com\_school) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2009-2015](https://cve.now/CVE-2009-2015.md): Directory traversal vulnerability in includes/file\_includer.php in the Ideal MooFAQ (com\_moofaq) component 1.0 for Joomla! allows remote att (no CVSS)
- [CVE-2009-2016](https://cve.now/CVE-2009-2016.md): SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid pa (no CVSS)
- [CVE-2009-2017](https://cve.now/CVE-2009-2017.md): SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid param (no CVSS)
- [CVE-2009-2018](https://cve.now/CVE-2009-2018.md): SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic\_quotes\_gpc is disabled, allows remote attackers to exec (no CVSS)
- [CVE-2009-2019](https://cve.now/CVE-2009-2019.md): SQL injection vulnerability in news\_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid (no CVSS)
- [CVE-2009-2020](https://cve.now/CVE-2009-2020.md): Cross-site scripting (XSS) vulnerability in news\_detail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2009-2021](https://cve.now/CVE-2009-2021.md): SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category p (no CVSS)
- [CVE-2009-2022](https://cve.now/CVE-2009-2022.md): fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloa (no CVSS)
- [CVE-2009-2023](https://cve.now/CVE-2009-2023.md): SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbi (no CVSS)
- [CVE-2009-2024](https://cve.now/CVE-2009-2024.md): Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attacke (no CVSS)
- [CVE-2009-2025](https://cve.now/CVE-2009-2025.md): admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) U (no CVSS)
- [CVE-2009-0791](https://cve.now/CVE-2009-0791.md): Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and k (no CVSS)
- [CVE-2009-0949](https://cve.now/CVE-2009-0949.md): The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allow (no CVSS)
- [CVE-2009-1196](https://cve.now/CVE-2009-1196.md): The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd (no CVSS)
- [CVE-2009-2012](https://cve.now/CVE-2009-2012.md): Unspecified vulnerability in idmap in Sun OpenSolaris snv\_88 through snv\_110, when a CIFS server is enabled, allows local users to cause a d (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-06-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.