# CVEs published 2009-10-02

16 CVEs were published on October 2, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3528](https://cve.now/CVE-2009-3528.md): SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid pa (no CVSS)
- [CVE-2009-3529](https://cve.now/CVE-2009-3529.md): SQL injection vulnerability in index.php in RadScripts RadBids Gold 4 allows remote attackers to execute arbitrary SQL commands via the fid (no CVSS)
- [CVE-2009-3530](https://cve.now/CVE-2009-3530.md): Cross-site scripting (XSS) vulnerability in storefront.php in RadScripts RadBids Gold 4 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2009-3531](https://cve.now/CVE-2009-3531.md): SQL injection vulnerability in vnews.php in Universe CMS 1.0.6 allows remote attackers to execute arbitrary SQL commands via the id paramete (no CVSS)
- [CVE-2009-3532](https://cve.now/CVE-2009-3532.md): Multiple SQL injection vulnerabilities in login.asp (aka the login screen) in LogRover 2.3 and 2.3.3 on Windows allow remote attackers to ex (no CVSS)
- [CVE-2009-3533](https://cve.now/CVE-2009-3533.md): SQL injection vulnerability in report.php in Meeting Room Booking System (MRBS) before 1.4.2 allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2009-3534](https://cve.now/CVE-2009-3534.md): Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic\_quotes\_gpc is disabled, allows remote attackers to read arbitra (no CVSS)
- [CVE-2009-3535](https://cve.now/CVE-2009-3535.md): Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2009-3536](https://cve.now/CVE-2009-3536.md): Multiple stack-based buffer overflows in EpicDJSoftware EpicVJ 1.2.8.0 and 1.3.1.2 allow remote attackers to cause a denial of service (appl (no CVSS)
- [CVE-2009-3537](https://cve.now/CVE-2009-3537.md): Multiple stack-based buffer overflows in EpicDJSoftware EpicDJ 1.3.9.1 allow remote attackers to cause a denial of service (application cras (no CVSS)
- [CVE-2009-3538](https://cve.now/CVE-2009-3538.md): Directory traversal vulnerability in thumb.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2009-3539](https://cve.now/CVE-2009-3539.md): Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2009-3540](https://cve.now/CVE-2009-3540.md): Cross-site scripting (XSS) vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2009-3541](https://cve.now/CVE-2009-3541.md): PHP remote file inclusion vulnerability in CoupleDB.php in PHPGenealogy 2.0 allows remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2009-3542](https://cve.now/CVE-2009-3542.md): Directory traversal vulnerability in ls.php in LittleSite (aka LS or LittleSite.php) 0.1 allows remote attackers to include and execute arbi (no CVSS)
- [CVE-2009-3543](https://cve.now/CVE-2009-3543.md): SQL injection vulnerability in \_phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL comma (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-10-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.