# CVEs published 2009-10-11

12 CVEs were published on October 11, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3659](https://cve.now/CVE-2009-3659.md): SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL commands via the page par (no CVSS)
- [CVE-2009-3660](https://cve.now/CVE-2009-3660.md): PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register\_globals is enabled, allows remo (no CVSS)
- [CVE-2009-3661](https://cve.now/CVE-2009-3661.md): Multiple SQL injection vulnerabilities in the DJ-Catalog (com\_djcatalog) component for Joomla! allow remote attackers to execute arbitrary S (no CVSS)
- [CVE-2009-3662](https://cve.now/CVE-2009-3662.md): FileCopa FTP Server 5.01 allows remote attackers to cause a denial of service (server hang) via a large number of crafted NOOP commands. (no CVSS)
- [CVE-2009-3663](https://cve.now/CVE-2009-3663.md): Format string vulnerability in the h\_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2009-3664](https://cve.now/CVE-2009-3664.md): Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files (no CVSS)
- [CVE-2009-3665](https://cve.now/CVE-2009-3665.md): Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the (1 (no CVSS)
- [CVE-2009-3666](https://cve.now/CVE-2009-3666.md): Cross-site scripting (XSS) vulnerability in index.php in Nullam Blog 0.1.2 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2009-3667](https://cve.now/CVE-2009-3667.md): SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands via the Username. (no CVSS)
- [CVE-2009-3668](https://cve.now/CVE-2009-3668.md): Cross-site scripting (XSS) vulnerability in ardguest.php in Ardguest 1.8 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2009-3669](https://cve.now/CVE-2009-3669.md): SQL injection vulnerability in the foobla Suggestions (com\_foobla\_suggestions) component 1.5.11 for Joomla! allows remote attackers to execu (no CVSS)
- [CVE-2009-3670](https://cve.now/CVE-2009-3670.md): Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-10-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.