# CVEs published 2009-08-14

22 CVEs were published on August 14, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2769](https://cve.now/CVE-2009-2769.md): PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register\_globals is enabled, allows remote (no CVSS)
- [CVE-2009-2770](https://cve.now/CVE-2009-2770.md): PowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access via a MIME encoded value of admin for the my (no CVSS)
- [CVE-2009-2771](https://cve.now/CVE-2009-2771.md): Cross-site scripting (XSS) vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the ke (no CVSS)
- [CVE-2009-2772](https://cve.now/CVE-2009-2772.md): Multiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2009-2773](https://cve.now/CVE-2009-2773.md): PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2009-2774](https://cve.now/CVE-2009-2774.md): SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQL commands via the ID (no CVSS)
- [CVE-2009-2775](https://cve.now/CVE-2009-2775.md): SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2009-2776](https://cve.now/CVE-2009-2776.md): SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid pa (no CVSS)
- [CVE-2009-2777](https://cve.now/CVE-2009-2777.md): SQL injection vulnerability in visitor/view.php in GarageSales Script allows remote attackers to execute arbitrary SQL commands via the key (no CVSS)
- [CVE-2009-2778](https://cve.now/CVE-2009-2778.md): Cross-site scripting (XSS) vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-6974](https://cve.now/CVE-2008-6974.md): Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the au (no CVSS)
- [CVE-2008-6975](https://cve.now/CVE-2008-6975.md): Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication (no CVSS)
- [CVE-2009-1048](https://cve.now/CVE-2009-1048.md): The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7 (no CVSS)
- [CVE-2009-2417](https://cve.now/CVE-2009-2417.md): lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the (no CVSS)
- [CVE-2009-2677](https://cve.now/CVE-2009-2677.md): Cross-site request forgery (CSRF) vulnerability in HP Insight Control Suite For Linux (aka ICE-LX) before 2.11 allows remote attackers to hi (no CVSS)
- [CVE-2009-2691](https://cve.now/CVE-2009-2691.md): The mm\_for\_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files (no CVSS)
- [CVE-2009-2692](https://cve.now/CVE-2009-2692.md): The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in prot (no CVSS)
- [CVE-2009-2764](https://cve.now/CVE-2009-2764.md): Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service (application (no CVSS)
- [CVE-2009-2765](https://cve.now/CVE-2009-2765.md): httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2009-2766](https://cve.now/CVE-2009-2766.md): httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which al (no CVSS)
- [CVE-2009-2767](https://cve.now/CVE-2009-2767.md): The init\_posix\_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of servic (no CVSS)
- [CVE-2009-2768](https://cve.now/CVE-2009-2768.md): The load\_flat\_shared\_library function in fs/binfmt\_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-08-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.