# CVEs published 2008-10-07

28 CVEs were published on October 7, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3061](https://cve.now/CVE-2008-3061.md): Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and… (no CVSS)
- [CVE-2008-3060](https://cve.now/CVE-2008-3060.md): V-webmail 1.5.0 allows remote attackers to obtain sensitive information via (1) malformed input in the login page… (no CVSS)
- [CVE-2008-3063](https://cve.now/CVE-2008-3063.md): SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-4477](https://cve.now/CVE-2008-4477.md): alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file. (no CVSS)
- [CVE-2008-4474](https://cve.now/CVE-2008-4474.md): freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files in (1)… (no CVSS)
- [CVE-2008-4475](https://cve.now/CVE-2008-4475.md): ibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2008-4476](https://cve.now/CVE-2008-4476.md): sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympa\_aliases.$$ temporary file. (no CVSS)
- [CVE-2008-3834](https://cve.now/CVE-2008-3834.md): The dbus\_signature\_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2008-3543](https://cve.now/CVE-2008-3543.md): Unspecified vulnerability in NFS / ONCplus B.11.31\_04 and earlier on HP-UX B.11.31 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2008-4384](https://cve.now/CVE-2008-4384.md): Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow… (no CVSS)
- [CVE-2008-4393](https://cve.now/CVE-2008-4393.md): Cross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier allows remote attackers to… (no CVSS)
- [CVE-2008-4421](https://cve.now/CVE-2008-4421.md): Directory traversal vulnerability in MetaGauge 1.0.0.17, and probably other versions before 1.0.3.38, allows remote attackers to read… (no CVSS)
- [CVE-2008-4471](https://cve.now/CVE-2008-4471.md): Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in… (no CVSS)
- [CVE-2008-4472](https://cve.now/CVE-2008-4472.md): The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk… (no CVSS)
- [CVE-2008-4457](https://cve.now/CVE-2008-4457.md): SQL injection vulnerability in inc/inc\_statistics.php in MemHT Portal 3.9.0 and earlier, when magic\_quotes\_gpc is disabled, allows remote… (no CVSS)
- [CVE-2008-4458](https://cve.now/CVE-2008-4458.md): SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-4459](https://cve.now/CVE-2008-4459.md): SQL injection vulnerability in pick\_users.php in the groups module in eXtrovert Thyme 1.3 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-4460](https://cve.now/CVE-2008-4460.md): SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-4461](https://cve.now/CVE-2008-4461.md): SQL injection vulnerability in advanced\_search\_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to… (no CVSS)
- [CVE-2008-4462](https://cve.now/CVE-2008-4462.md): SQL injection vulnerability in view\_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-4463](https://cve.now/CVE-2008-4463.md): SQL injection vulnerability in view\_news.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-4464](https://cve.now/CVE-2008-4464.md): SQL injection vulnerability in view\_mags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-4465](https://cve.now/CVE-2008-4465.md): SQL injection vulnerability in view\_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-4466](https://cve.now/CVE-2008-4466.md): SQL injection vulnerability in view\_products\_cat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-4467](https://cve.now/CVE-2008-4467.md): SQL injection vulnerability in show\_series\_ink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2008-4468](https://cve.now/CVE-2008-4468.md): SQL injection vulnerability in view\_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-4469](https://cve.now/CVE-2008-4469.md): SQL injection vulnerability in view\_cresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2008-4470](https://cve.now/CVE-2008-4470.md): Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a denial of service (application crash) or… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-10-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.