# CVEs published 2008-11-03

14 CVEs were published on November 3, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4879](https://cve.now/CVE-2008-4879.md): SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the cat parameter… (no CVSS)
- [CVE-2008-4880](https://cve.now/CVE-2008-4880.md): SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the id… (no CVSS)
- [CVE-2008-4881](https://cve.now/CVE-2008-4881.md): SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2008-4882](https://cve.now/CVE-2008-4882.md): SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-4883](https://cve.now/CVE-2008-4883.md): SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2008-4884](https://cve.now/CVE-2008-4884.md): SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-4885](https://cve.now/CVE-2008-4885.md): SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-4886](https://cve.now/CVE-2008-4886.md): SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2008-4887](https://cve.now/CVE-2008-4887.md): SQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id… (no CVSS)
- [CVE-2008-4888](https://cve.now/CVE-2008-4888.md): Cross-site scripting (XSS) vulnerability in error.php in NetRisk 2.0 and earlier allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2008-4889](https://cve.now/CVE-2008-4889.md): SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-4890](https://cve.now/CVE-2008-4890.md): SQL injection vulnerability in products.php in 1st News 4 Professional (PR 1) allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2008-3867](https://cve.now/CVE-2008-3867.md): SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-3868](https://cve.now/CVE-2008-3868.md): Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-11-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.