# CVEs published 2009-06-26

17 CVEs were published on June 26, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-1394](https://cve.now/CVE-2009-1394.md): Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long ma (no CVSS)
- [CVE-2009-1628](https://cve.now/CVE-2009-1628.md): Stack-based buffer overflow in mnet.exe in Unisys Business Information Server (BIS) 10 and 10.1 on Windows allows remote attackers to execut (no CVSS)
- [CVE-2009-1887](https://cve.now/CVE-2009-1887.md): agent/snmp\_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (dae (no CVSS)
- [CVE-2009-2227](https://cve.now/CVE-2009-2227.md): Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted (no CVSS)
- [CVE-2009-2228](https://cve.now/CVE-2009-2228.md): Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2009-2229](https://cve.now/CVE-2009-2229.md): Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2009-2230](https://cve.now/CVE-2009-2230.md): SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to exe (no CVSS)
- [CVE-2009-2231](https://cve.now/CVE-2009-2231.md): MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via an admin account record in a MIDAS cookie. (no CVSS)
- [CVE-2009-2232](https://cve.now/CVE-2009-2232.md): SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2009-2233](https://cve.now/CVE-2009-2233.md): The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative acce (no CVSS)
- [CVE-2009-2220](https://cve.now/CVE-2009-2220.md): Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register\_globals is enabled and magic\_quotes\_gpc is disabled, allow (no CVSS)
- [CVE-2009-2221](https://cve.now/CVE-2009-2221.md): Cross-site scripting (XSS) vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via u (no CVSS)
- [CVE-2009-2222](https://cve.now/CVE-2009-2222.md): Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal seq (no CVSS)
- [CVE-2009-2223](https://cve.now/CVE-2009-2223.md): Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local fil (no CVSS)
- [CVE-2009-2224](https://cve.now/CVE-2009-2224.md): Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when register\_globals is enabled, allows remote attackers t (no CVSS)
- [CVE-2009-2225](https://cve.now/CVE-2009-2225.md): Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2009-2226](https://cve.now/CVE-2009-2226.md): Cross-site scripting (XSS) vulnerability in Let's PHP! Tree BBS 2004/11/23 and earlier allows remote attackers to inject arbitrary web scrip (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-06-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.