# CVEs published 2009-06-27

15 CVEs were published on June 27, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6835](https://cve.now/CVE-2008-6835.md): Cross-site scripting (XSS) vulnerability in OpenID 5.x before 5.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-6836](https://cve.now/CVE-2008-6836.md): Cross-site request forgery (CSRF) vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attackers to hijack the aut (no CVSS)
- [CVE-2008-6837](https://cve.now/CVE-2008-6837.md): SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different i (no CVSS)
- [CVE-2008-6838](https://cve.now/CVE-2008-6838.md): Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2008-6839](https://cve.now/CVE-2008-6839.md): Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2009-2234](https://cve.now/CVE-2009-2234.md): Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2009-2235](https://cve.now/CVE-2009-2235.md): SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL commands via the id para (no CVSS)
- [CVE-2009-2236](https://cve.now/CVE-2009-2236.md): SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2009-2237](https://cve.now/CVE-2009-2237.md): Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote att (no CVSS)
- [CVE-2009-2238](https://cve.now/CVE-2009-2238.md): Unrestricted file upload vulnerability in includes/shared\_scripts/wysiwyg\_editor/assetmanager/assetmanager.asp in DMXReady Registration Mana (no CVSS)
- [CVE-2009-2239](https://cve.now/CVE-2009-2239.md): SQL injection vulnerability in the (1) casinobase (com\_casinobase), (2) casino\_blackjack (com\_casino\_blackjack), and (3) casino\_videopoker ( (no CVSS)
- [CVE-2009-2240](https://cve.now/CVE-2009-2240.md): Cross-site scripting (XSS) vulnerability in AD2000 free-sw leger (aka Web Conference Room Free) 1.6.4 and earlier allows remote attackers to (no CVSS)
- [CVE-2009-2241](https://cve.now/CVE-2009-2241.md): Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2009-2242](https://cve.now/CVE-2009-2242.md): SQL injection vulnerability in active\_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2009-2243](https://cve.now/CVE-2009-2243.md): SQL injection vulnerability in active\_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL com (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-06-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.