# CVEs published 2009-07-09

23 CVEs were published on July 9, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0667](https://cve.now/CVE-2009-0667.md): Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows (no CVSS)
- [CVE-2009-1724](https://cve.now/CVE-2009-1724.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for (no CVSS)
- [CVE-2009-1725](https://cve.now/CVE-2009-1725.md): WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in k (no CVSS)
- [CVE-2009-2387](https://cve.now/CVE-2009-2387.md): Unspecified vulnerability in the proc filesystem in Sun OpenSolaris snv\_49 through snv\_109 allows local users to cause a denial of service ( (no CVSS)
- [CVE-2009-2388](https://cve.now/CVE-2009-2388.md): SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword pa (no CVSS)
- [CVE-2009-2389](https://cve.now/CVE-2009-2389.md): Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magic\_quotes\_gpc is disabled, allow remote attacke (no CVSS)
- [CVE-2009-2390](https://cve.now/CVE-2009-2390.md): SQL injection vulnerability in the BookFlip (com\_bookflip) component 2.1 for Joomla! allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2009-2391](https://cve.now/CVE-2009-2391.md): Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2009-2392](https://cve.now/CVE-2009-2392.md): SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2009-2393](https://cve.now/CVE-2009-2393.md): admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated use (no CVSS)
- [CVE-2009-2394](https://cve.now/CVE-2009-2394.md): SQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile (aka Messages Library) 2.0 allows remote attackers t (no CVSS)
- [CVE-2009-2395](https://cve.now/CVE-2009-2395.md): SQL injection vulnerability in the K2 (com\_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2009-2396](https://cve.now/CVE-2009-2396.md): PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote (no CVSS)
- [CVE-2009-2397](https://cve.now/CVE-2009-2397.md): Directory traversal vulnerability in download.php in Audio Article Directory allows remote attackers to read arbitrary files via directory t (no CVSS)
- [CVE-2009-2398](https://cve.now/CVE-2009-2398.md): Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// (dot dot sl (no CVSS)
- [CVE-2009-2399](https://cve.now/CVE-2009-2399.md): PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when register\_globals is enabled, allows re (no CVSS)
- [CVE-2009-2400](https://cve.now/CVE-2009-2400.md): SQL injection vulnerability in the PHP (com\_php) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2009-2401](https://cve.now/CVE-2009-2401.md): Cross-site scripting (XSS) vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject arbitrary web script or HTML via a forum p (no CVSS)
- [CVE-2009-2402](https://cve.now/CVE-2009-2402.md): SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2009-2403](https://cve.now/CVE-2009-2403.md): Heap-based buffer overflow in SCMPX 1.5.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code (no CVSS)
- [CVE-2009-2419](https://cve.now/CVE-2009-2419.md): Use-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple Safari 4.0 and 4.0.1 allows remote attackers (no CVSS)
- [CVE-2009-2420](https://cve.now/CVE-2009-2420.md): Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a (no CVSS)
- [CVE-2009-2421](https://cve.now/CVE-2009-2421.md): The CFCharacterSetInitInlineBuffer method in CoreFoundation.dll in Apple Safari 3.2.3 allows remote attackers to cause a denial of service ( (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-07-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.