# CVEs published 2008-05-19

13 CVEs were published on May 19, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4875](https://cve.now/CVE-2005-4875.md): TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the… (no CVSS, typo3/cms)
- [CVE-2008-2334](https://cve.now/CVE-2008-2334.md): Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS)
- [CVE-2008-2335](https://cve.now/CVE-2008-2335.md): Cross-site scripting (XSS) vulnerability in search\_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject… (no CVSS)
- [CVE-2008-2336](https://cve.now/CVE-2008-2336.md): SQL injection vulnerability in category.php in 68 Classifieds 4.0.1 allows remote attackers to execute arbitrary SQL commands via the cat… (no CVSS)
- [CVE-2008-2337](https://cve.now/CVE-2008-2337.md): Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic\_quotes\_gpc is disabled, allow remote attackers to execute arbitrary… (no CVSS)
- [CVE-2008-2338](https://cve.now/CVE-2008-2338.md): Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing… (no CVSS)
- [CVE-2008-2339](https://cve.now/CVE-2008-2339.md): SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-2340](https://cve.now/CVE-2008-2340.md): Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang… (no CVSS)
- [CVE-2008-2341](https://cve.now/CVE-2008-2341.md): PHP remote file inclusion vulnerability in ch\_readalso.php in News Manager 2.0 allows remote attackers to execute arbitrary PHP code via a… (no CVSS)
- [CVE-2008-2342](https://cve.now/CVE-2008-2342.md): Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-2343](https://cve.now/CVE-2008-2343.md): News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to (1)… (no CVSS)
- [CVE-2008-2344](https://cve.now/CVE-2008-2344.md): Cross-site scripting (XSS) vulnerability in the air\_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to inject… (no CVSS)
- [CVE-2008-2345](https://cve.now/CVE-2008-2345.md): Unspecified vulnerability in the air\_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary PHP… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-05-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.