# CVEs published 2009-08-17

14 CVEs were published on August 17, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2779](https://cve.now/CVE-2009-2779.md): SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in (no CVSS)
- [CVE-2009-2780](https://cve.now/CVE-2009-2780.md): Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2009-2781](https://cve.now/CVE-2009-2781.md): SQL injection vulnerability in forum.php in Arab Portal 2.x, when magic\_quotes\_gpc is disabled, allows remote authenticated users to execute (no CVSS)
- [CVE-2009-2782](https://cve.now/CVE-2009-2782.md): SQL injection vulnerability in the JFusion (com\_jfusion) component for Joomla! allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2009-2783](https://cve.now/CVE-2009-2783.md): Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS)
- [CVE-2009-2784](https://cve.now/CVE-2009-2784.md): Multiple directory traversal vulnerabilities in dit.cms 1.3, when register\_globals is enabled, allow remote attackers to include and execute (no CVSS)
- [CVE-2009-2785](https://cve.now/CVE-2009-2785.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2009-2786](https://cve.now/CVE-2009-2786.md): SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to (no CVSS)
- [CVE-2009-2787](https://cve.now/CVE-2009-2787.md): Directory traversal vulnerability in include/reputation/rep\_profile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB, (no CVSS)
- [CVE-2009-2788](https://cve.now/CVE-2009-2788.md): Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via the (1) adminName pa (no CVSS)
- [CVE-2009-2789](https://cve.now/CVE-2009-2789.md): SQL injection vulnerability in the Permis (com\_groups) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2009-2790](https://cve.now/CVE-2009-2790.md): SQL injection vulnerability in cat\_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the c (no CVSS)
- [CVE-2009-2791](https://cve.now/CVE-2009-2791.md): PHP remote file inclusion vulnerability in pda\_projects.php in WebDynamite ProjectButler 1.5.0 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2009-2792](https://cve.now/CVE-2009-2792.md): Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS (RSCMS) 0.3a allows remote attackers to include and execu (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-08-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.