# CVEs published 2008-10-23

40 CVEs were published on October 23, 2008: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2008-4726](https://cve.now/CVE-2008-4726.md): Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbitrary code via a… (no CVSS)
- [CVE-2008-4727](https://cve.now/CVE-2008-4727.md): Cross-site scripting (XSS) vulnerability in the contact update page (ss/bwgkoemr.P\_UpdateEmrgContacts) in SunGard Banner Student 7.3… (no CVSS)
- [CVE-2008-4728](https://cve.now/CVE-2008-4728.md): Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird… (no CVSS)
- [CVE-2008-4729](https://cve.now/CVE-2008-4729.md): Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and… (no CVSS)
- [CVE-2007-4349](https://cve.now/CVE-2007-4349.md): The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP… (no CVSS)
- [CVE-2008-2469](https://cve.now/CVE-2008-2469.md): Heap-based buffer overflow in the SPF\_dns\_resolv\_lookup function in Spf\_dns\_resolv.c in libspf2 before 1.2.8 allows remote attackers to… (no CVSS)
- [CVE-2008-3815](https://cve.now/CVE-2008-3815.md): Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1… (no CVSS)
- [CVE-2008-3816](https://cve.now/CVE-2008-3816.md): Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2(4)9 and 7.2(4)10 allows… (no CVSS)
- [CVE-2008-3817](https://cve.now/CVE-2008-3817.md): Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8.1 before 8.1(2)… (no CVSS)
- [CVE-2008-3862](https://cve.now/CVE-2008-3862.md): Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374… (no CVSS)
- [CVE-2008-3863](https://cve.now/CVE-2008-3863.md): Stack-based buffer overflow in the read\_special\_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka… (no CVSS)
- [CVE-2008-4250](https://cve.now/CVE-2008-4250.md): The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta a (CVSS 9.8, KEV)
- [CVE-2008-4694](https://cve.now/CVE-2008-4694.md): Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash) or execute… (no CVSS)
- [CVE-2008-4695](https://cve.now/CVE-2008-4695.md): Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache… (no CVSS)
- [CVE-2008-4696](https://cve.now/CVE-2008-4696.md): Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2008-4697](https://cve.now/CVE-2008-4697.md): The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the context of the… (no CVSS)
- [CVE-2008-4698](https://cve.now/CVE-2008-4698.md): Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new… (no CVSS)
- [CVE-2008-4722](https://cve.now/CVE-2008-4722.md): Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1)… (no CVSS)
- [CVE-2008-4723](https://cve.now/CVE-2008-4723.md): Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 3.0.1 through 3.0.3 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2008-4724](https://cve.now/CVE-2008-4724.md): Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2008-4725](https://cve.now/CVE-2008-4725.md): Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the… (no CVSS)
- [CVE-2008-4716](https://cve.now/CVE-2008-4716.md): SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-4717](https://cve.now/CVE-2008-4717.md): SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL commands via the adid… (no CVSS)
- [CVE-2008-4718](https://cve.now/CVE-2008-4718.md): Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include and execute… (no CVSS)
- [CVE-2008-4719](https://cve.now/CVE-2008-4719.md): PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when register\_globals is enabled… (no CVSS)
- [CVE-2008-4720](https://cve.now/CVE-2008-4720.md): Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary PHP code via a URL… (no CVSS)
- [CVE-2008-4721](https://cve.now/CVE-2008-4721.md): PHP Jabbers Post Comment 3.0 allows remote attackers to bypass authentication and gain administrative access by setting the… (no CVSS)
- [CVE-2008-4703](https://cve.now/CVE-2008-4703.md): SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article… (no CVSS)
- [CVE-2008-4704](https://cve.now/CVE-2008-4704.md): PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2008-4705](https://cve.now/CVE-2008-4705.md): SQL injection vulnerability in success\_story.php in php Online Dating Software MyPHPDating allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2008-4706](https://cve.now/CVE-2008-4706.md): SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-4707](https://cve.now/CVE-2008-4707.md): Directory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access unauthorized directories via a .. (no CVSS)
- [CVE-2008-4708](https://cve.now/CVE-2008-4708.md): BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum\_admin\_session cookie… (no CVSS)
- [CVE-2008-4709](https://cve.now/CVE-2008-4709.md): SQL injection vulnerability in news\_read.php in Pilot Group (PG) eTraining allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2008-4710](https://cve.now/CVE-2008-4710.md): Cross-site scripting (XSS) vulnerability in the stock quotes page in Stock 6.x before 6.x-1.0, a module for Drupal, allows remote… (no CVSS)
- [CVE-2008-4711](https://cve.now/CVE-2008-4711.md): SQL injection vulnerability in Joovili 3.0 and earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2008-4712](https://cve.now/CVE-2008-4712.md): Directory traversal vulnerability in pages/showblog.php in LnBlog 0.9.0 and earlier, when magic\_quotes\_gpc is disabled, allows remote… (no CVSS)
- [CVE-2008-4713](https://cve.now/CVE-2008-4713.md): SQL injection vulnerability in view.php in 212cafe Board 0.07 allows remote attackers to execute arbitrary SQL commands via the qID… (no CVSS)
- [CVE-2008-4714](https://cve.now/CVE-2008-4714.md): Atomic Photo Album 1.1.0 pre4 does not properly handle the apa\_cookie\_login and apa\_cookie\_password cookies, which probably allows remote… (no CVSS)
- [CVE-2008-4715](https://cve.now/CVE-2008-4715.md): SQL injection vulnerability in the Jpad (com\_jpad) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-10-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.