# CVEs published 2009-06-18

14 CVEs were published on June 18, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2109](https://cve.now/CVE-2009-2109.md): Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directory traversal sequence (no CVSS)
- [CVE-2009-2110](https://cve.now/CVE-2009-2110.md): Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic\_quotes\_gpc is disabled, allow remote attackers to include and e (no CVSS)
- [CVE-2009-2111](https://cve.now/CVE-2009-2111.md): Static code injection vulnerability in add\_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted (1 (no CVSS)
- [CVE-2009-2112](https://cve.now/CVE-2009-2112.md): Directory traversal vulnerability in include/page\_bottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local fi (no CVSS)
- [CVE-2009-2113](https://cve.now/CVE-2009-2113.md): Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter t (no CVSS)
- [CVE-2009-2114](https://cve.now/CVE-2009-2114.md): Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2009-2115](https://cve.now/CVE-2009-2115.md): admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, (no CVSS)
- [CVE-2009-2116](https://cve.now/CVE-2009-2116.md): Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory conten (no CVSS)
- [CVE-2009-2117](https://cve.now/CVE-2009-2117.md): uye\_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the kulladi cook (no CVSS)
- [CVE-2009-2118](https://cve.now/CVE-2009-2118.md): Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2009-2119](https://cve.now/CVE-2009-2119.md): Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0 (no CVSS)
- [CVE-2009-2120](https://cve.now/CVE-2009-2120.md): Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2009-1935](https://cve.now/CVE-2009-1935.md): Integer overflow in the pipe\_build\_write\_buffer function (sys/kern/sys\_pipe.c) in the direct write optimization feature in the pipe implemen (no CVSS)
- [CVE-2009-2108](https://cve.now/CVE-2009-2108.md): git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a reque (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.