# CVEs published 2009-07-28

13 CVEs were published on July 28, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2633](https://cve.now/CVE-2009-2633.md): PHP remote file inclusion vulnerability in toolbar\_ext.php in the VehicleManager (com\_vehiclemanager) component 1.0 Basic for Joomla! allows (no CVSS)
- [CVE-2009-2634](https://cve.now/CVE-2009-2634.md): PHP remote file inclusion vulnerability in toolbar\_ext.php in the MediaLibrary (com\_media\_library) component 1.5.3 Basic for Joomla! allows (no CVSS)
- [CVE-2009-2635](https://cve.now/CVE-2009-2635.md): PHP remote file inclusion vulnerability in toolbar\_ext.php in the RealEstateManager (com\_realestatemanager) component 1.0 Basic for Joomla! (no CVSS)
- [CVE-2009-2636](https://cve.now/CVE-2009-2636.md): Cross-site scripting (XSS) vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 (no CVSS)
- [CVE-2009-2637](https://cve.now/CVE-2009-2637.md): PHP remote file inclusion vulnerability in toolbar\_ext.php in the BookLibrary (com\_booklibrary) component 1.5.2.4 Basic for Joomla! allows r (no CVSS)
- [CVE-2009-2638](https://cve.now/CVE-2009-2638.md): SQL injection vulnerability in the AkoBook (com\_akobook) component 2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2009-2639](https://cve.now/CVE-2009-2639.md): SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2009-2640](https://cve.now/CVE-2009-2640.md): Multiple SQL injection vulnerabilities in cgi/admin.cgi in Interlogy Profile Manager Basic allow remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2009-2641](https://cve.now/CVE-2009-2641.md): PHP remote file inclusion vulnerability in app\_and\_readme/navigator/index.php in School Data Navigator allows remote attackers to execute ar (no CVSS)
- [CVE-2009-2642](https://cve.now/CVE-2009-2642.md): index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie (no CVSS)
- [CVE-2009-2643](https://cve.now/CVE-2009-2643.md): Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterpr (no CVSS)
- [CVE-2009-2621](https://cve.now/CVE-2009-2621.md): Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows rem (no CVSS)
- [CVE-2009-2622](https://cve.now/CVE-2009-2622.md): Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests includin (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-07-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.