# CVEs published 2009-09-03

16 CVEs were published on September 3, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3052](https://cve.now/CVE-2009-3052.md): SQL injection vulnerability in root/includes/prime\_quick\_style.php in the Prime Quick Style addon before 1.2.3 for phpBB 3 allows remote aut (no CVSS)
- [CVE-2009-3053](https://cve.now/CVE-2009-3053.md): Directory traversal vulnerability in the Agora (com\_agora) component 3.0.0b for Joomla! allows remote attackers to include and execute arbit (no CVSS)
- [CVE-2009-3054](https://cve.now/CVE-2009-3054.md): SQL injection vulnerability in the Artetics.com Art Portal (com\_artportal) component 1.0 for Joomla! allows remote attackers to execute arbi (no CVSS)
- [CVE-2009-3055](https://cve.now/CVE-2009-3055.md): PHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine (DLE) 8.2 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2009-3056](https://cve.now/CVE-2009-3056.md): PHP remote file inclusion vulnerability in include/engine/content/elements/menu.php in KingCMS 0.6.0 allows remote attackers to execute arbi (no CVSS)
- [CVE-2009-3057](https://cve.now/CVE-2009-3057.md): Multiple cross-site scripting (XSS) vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2009-3058](https://cve.now/CVE-2009-3058.md): Stack-based buffer overflow in akPlayer 1.9.0 allows remote attackers to execute arbitrary code via a long string in a .plt playlist file. (no CVSS)
- [CVE-2009-3059](https://cve.now/CVE-2009-3059.md): Multiple SQL injection vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2009-3060](https://cve.now/CVE-2009-3060.md): Multiple cross-site scripting (XSS) vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2009-3061](https://cve.now/CVE-2009-3061.md): SQL injection vulnerability in lesson.php in Alqatari Q R Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id pa (no CVSS)
- [CVE-2009-3062](https://cve.now/CVE-2009-3062.md): SQL injection vulnerability in message\_box.php in OSI Codes PHP Live! 3.3 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2009-3063](https://cve.now/CVE-2009-3063.md): SQL injection vulnerability in the Game Server (com\_gameserver) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2009-3064](https://cve.now/CVE-2009-3064.md): Directory traversal vulnerability in debugger/debug\_php.php in Ve-EDIT 0.1.4 allows remote attackers to include and execute arbitrary local (no CVSS)
- [CVE-2009-3065](https://cve.now/CVE-2009-3065.md): PHP remote file inclusion vulnerability in editor/edit\_htmlarea.php in Ve-EDIT 0.1.4 allows remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2009-3066](https://cve.now/CVE-2009-3066.md): Multiple cross-site scripting (XSS) vulnerabilities in PropertyWatchScript.com Property Watch 2.0 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2009-3067](https://cve.now/CVE-2009-3067.md): Cross-site scripting (XSS) vulnerability in index.php in Reservation Manager allows remote attackers to inject arbitrary web script or HTML (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-09-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.