# CVEs published 2008-12-16

24 CVEs were published on December 16, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5585](https://cve.now/CVE-2008-5585.md): Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitrary PHP code via a… (no CVSS)
- [CVE-2008-5586](https://cve.now/CVE-2008-5586.md): SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic\_quotes\_gpc is disabled, allows… (no CVSS)
- [CVE-2008-5587](https://cve.now/CVE-2008-5587.md): Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register\_globals is enabled, allows… (no CVSS)
- [CVE-2008-5588](https://cve.now/CVE-2008-5588.md): SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID… (no CVSS)
- [CVE-2008-5589](https://cve.now/CVE-2008-5589.md): SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-5590](https://cve.now/CVE-2008-5590.md): SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to… (no CVSS)
- [CVE-2008-5591](https://cve.now/CVE-2008-5591.md): Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2008-5592](https://cve.now/CVE-2008-5592.md): Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote… (no CVSS)
- [CVE-2008-5593](https://cve.now/CVE-2008-5593.md): Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local… (no CVSS)
- [CVE-2008-5594](https://cve.now/CVE-2008-5594.md): Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local… (no CVSS)
- [CVE-2008-5595](https://cve.now/CVE-2008-5595.md): SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter. (no CVSS)
- [CVE-2008-5596](https://cve.now/CVE-2008-5596.md): Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote… (no CVSS)
- [CVE-2008-5597](https://cve.now/CVE-2008-5597.md): Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the… (no CVSS)
- [CVE-2008-5598](https://cve.now/CVE-2008-5598.md): Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. (no CVSS)
- [CVE-2008-5599](https://cve.now/CVE-2008-5599.md): SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-5600](https://cve.now/CVE-2008-5600.md): Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to… (no CVSS)
- [CVE-2008-5601](https://cve.now/CVE-2008-5601.md): User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to… (no CVSS)
- [CVE-2008-5602](https://cve.now/CVE-2008-5602.md): Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to… (no CVSS)
- [CVE-2008-5603](https://cve.now/CVE-2008-5603.md): ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download… (no CVSS)
- [CVE-2008-5604](https://cve.now/CVE-2008-5604.md): Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic\_quotes\_gpc is disabled, allows remote attackers… (no CVSS)
- [CVE-2008-5605](https://cve.now/CVE-2008-5605.md): Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter… (no CVSS)
- [CVE-2008-5606](https://cve.now/CVE-2008-5606.md): Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows… (no CVSS)
- [CVE-2008-5607](https://cve.now/CVE-2008-5607.md): SQL injection vulnerability in the JMovies (aka JM or com\_jmovies) component 1.1 for Joomla! allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2008-5608](https://cve.now/CVE-2008-5608.md): ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-12-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.