# CVEs published 2008-08-20

18 CVEs were published on August 20, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3718](https://cve.now/CVE-2008-3718.md): Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) id… (no CVSS)
- [CVE-2008-3719](https://cve.now/CVE-2008-3719.md): SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-3720](https://cve.now/CVE-2008-3720.md): SQL injection vulnerability in index.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-3721](https://cve.now/CVE-2008-3721.md): PHP remote file inclusion vulnerability in user\_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2008-3722](https://cve.now/CVE-2008-3722.md): SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. (no CVSS)
- [CVE-2008-3723](https://cve.now/CVE-2008-3723.md): Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary… (no CVSS)
- [CVE-2008-3724](https://cve.now/CVE-2008-3724.md): SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-3725](https://cve.now/CVE-2008-3725.md): SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-3726](https://cve.now/CVE-2008-3726.md): Cross-site scripting (XSS) vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote… (no CVSS)
- [CVE-2008-3727](https://cve.now/CVE-2008-3727.md): Directory traversal vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers… (no CVSS)
- [CVE-2008-3728](https://cve.now/CVE-2008-3728.md): Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with… (no CVSS)
- [CVE-2008-3729](https://cve.now/CVE-2008-3729.md): Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to bypass authentication and obtain… (no CVSS)
- [CVE-2008-3730](https://cve.now/CVE-2008-3730.md): Cross-site scripting (XSS) vulnerability in Nordicwind Document Management System (NOAH) before 3.2.2 allows remote attackers to inject… (no CVSS)
- [CVE-2008-3731](https://cve.now/CVE-2008-3731.md): Unspecified vulnerability in Serv-U File Server 7.0.0.1, and other versions before 7.2.0.1, allows remote authenticated users to cause a… (no CVSS)
- [CVE-2008-3732](https://cve.now/CVE-2008-3732.md): Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2008-3733](https://cve.now/CVE-2008-3733.md): Stack-based buffer overflow in EO Video (eo-video) 1.36 allows remote attackers to cause a denial of service (application crash) or… (no CVSS)
- [CVE-2008-3734](https://cve.now/CVE-2008-3734.md): Format string vulnerability in Ipswitch WS\_FTP Home 2007.0.0.2 and WS\_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a… (no CVSS)
- [CVE-2008-3735](https://cve.now/CVE-2008-3735.md): Cross-site scripting (XSS) vulnerability in index.php in PHPizabi before 848 Core HotFix Pack 3 allows remote attackers to inject… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.