# CVEs published 2011-09-09 9 CVEs were published on September 9, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2009-5087](https://cve.now/CVE-2009-5087.md): Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitr (no CVSS) - [CVE-2009-5088](https://cve.now/CVE-2009-5088.md): SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID param (no CVSS) - [CVE-2009-5089](https://cve.now/CVE-2009-5089.md): Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2009-5090](https://cve.now/CVE-2009-5090.md): SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magic\_quotes\_gpc is disabled, allows remote attackers to exe (no CVSS) - [CVE-2009-5091](https://cve.now/CVE-2009-5091.md): SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id param (no CVSS) - [CVE-2009-5092](https://cve.now/CVE-2009-5092.md): Cross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlier allows remote attackers to inje (no CVSS) - [CVE-2009-5093](https://cve.now/CVE-2009-5093.md): Directory traversal vulnerability in gastbuch.php in Gästebuch (Gastebuch) 1.6 allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2009-5094](https://cve.now/CVE-2009-5094.md): SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL commands via the item (no CVSS) - [CVE-2009-5095](https://cve.now/CVE-2009-5095.md): PHP remote file inclusion vulnerability in index\_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to execute arbitrary PHP code via (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-09-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.