# CVEs published 2009-06-30 9 CVEs were published on June 30, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-2254](https://cve.now/CVE-2009-2254.md): Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to (no CVSS) - [CVE-2009-2255](https://cve.now/CVE-2009-2255.md): Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record\_company.php, which allows remote attacke (no CVSS) - [CVE-2009-2256](https://cve.now/CVE-2009-2256.md): The administrative web interface on the Netgear DG632 with firmware 3.4.0\_ap allows remote attackers to cause a denial of service (web outag (no CVSS) - [CVE-2009-2257](https://cve.now/CVE-2009-2257.md): The administrative web interface on the Netgear DG632 with firmware 3.4.0\_ap allows remote attackers to bypass authentication via a direct r (no CVSS) - [CVE-2009-2258](https://cve.now/CVE-2009-2258.md): Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0\_ap allows re (no CVSS) - [CVE-2009-2260](https://cve.now/CVE-2009-2260.md): stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attacker (no CVSS) - [CVE-2009-2261](https://cve.now/CVE-2009-2261.md): PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .t (no CVSS) - [CVE-2009-2262](https://cve.now/CVE-2009-2262.md): PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary PHP code via a URL (no CVSS) - [CVE-2009-2263](https://cve.now/CVE-2009-2263.md): Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include and execute arbitrary (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-06-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.