# CVEs published 2009-07-24

14 CVEs were published on July 24, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6876](https://cve.now/CVE-2008-6876.md): Cross-site scripting (XSS) vulnerability in login.php in EsPartenaires 1.0 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2008-6874](https://cve.now/CVE-2008-6874.md): Multiple SQL injection vulnerabilities in ASP SiteWare autoDealer 1 and 2 allow remote attackers to execute arbitrary SQL commands via the i (no CVSS)
- [CVE-2008-6875](https://cve.now/CVE-2008-6875.md): SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid para (no CVSS)
- [CVE-2009-2585](https://cve.now/CVE-2009-2585.md): SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a member cookie in an a (no CVSS)
- [CVE-2009-2586](https://cve.now/CVE-2009-2586.md): Cross-site scripting (XSS) vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2009-2587](https://cve.now/CVE-2009-2587.md): Multiple cross-site scripting (XSS) vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web script or HTML via the (1 (no CVSS)
- [CVE-2009-2588](https://cve.now/CVE-2009-2588.md): Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2009-2589](https://cve.now/CVE-2009-2589.md): Multiple cross-site scripting (XSS) vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2009-2590](https://cve.now/CVE-2009-2590.md): SQL injection vulnerability in showcategory.php in Hutscripts PHP Website Script allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2009-2591](https://cve.now/CVE-2009-2591.md): SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL commands via the li (no CVSS)
- [CVE-2009-2592](https://cve.now/CVE-2009-2592.md): SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mes\_ (no CVSS)
- [CVE-2009-2593](https://cve.now/CVE-2009-2593.md): SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands via the itemid param (no CVSS)
- [CVE-2009-2594](https://cve.now/CVE-2009-2594.md): Cross-site scripting (XSS) vulnerability in censura.php in Censura 1.16.04 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2009-2595](https://cve.now/CVE-2009-2595.md): Cross-site scripting (XSS) vulnerability in productSearch.html in Censura 2.0.4 and 2.1.0 allows remote attackers to inject arbitrary web sc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-07-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.