# CVEs published 2008-12-30 31 CVEs were published on December 30, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-5761](https://cve.now/CVE-2008-5761.md): Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary… (no CVSS) - [CVE-2008-5762](https://cve.now/CVE-2008-5762.md): Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which… (no CVSS) - [CVE-2008-5763](https://cve.now/CVE-2008-5763.md): PHP remote file inclusion vulnerability in slogin\_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to… (no CVSS) - [CVE-2008-5764](https://cve.now/CVE-2008-5764.md): PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register\_globals is enabled, allows remote attackers to… (no CVSS) - [CVE-2008-5765](https://cve.now/CVE-2008-5765.md): WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to… (no CVSS) - [CVE-2008-5766](https://cve.now/CVE-2008-5766.md): SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id… (no CVSS) - [CVE-2008-5767](https://cve.now/CVE-2008-5767.md): SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands via the authorID… (no CVSS) - [CVE-2008-5768](https://cve.now/CVE-2008-5768.md): SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute… (no CVSS) - [CVE-2008-5769](https://cve.now/CVE-2008-5769.md): Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script… (no CVSS) - [CVE-2008-5770](https://cve.now/CVE-2008-5770.md): Cross-site scripting (XSS) vulnerability in config/make\_config.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web… (no CVSS) - [CVE-2008-5771](https://cve.now/CVE-2008-5771.md): Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files… (no CVSS) - [CVE-2008-5772](https://cve.now/CVE-2008-5772.md): Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands… (no CVSS) - [CVE-2008-5773](https://cve.now/CVE-2008-5773.md): Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download… (no CVSS) - [CVE-2008-5774](https://cve.now/CVE-2008-5774.md): Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2008-5775](https://cve.now/CVE-2008-5775.md): SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL commands via the id… (no CVSS) - [CVE-2008-5776](https://cve.now/CVE-2008-5776.md): Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via… (no CVSS) - [CVE-2008-5777](https://cve.now/CVE-2008-5777.md): SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the cid parameter. (no CVSS) - [CVE-2008-5778](https://cve.now/CVE-2008-5778.md): SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2008-5779](https://cve.now/CVE-2008-5779.md): SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2008-5780](https://cve.now/CVE-2008-5780.md): Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to… (no CVSS) - [CVE-2008-5781](https://cve.now/CVE-2008-5781.md): SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2008-5757](https://cve.now/CVE-2008-5757.md): Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated… (no CVSS) - [CVE-2008-5758](https://cve.now/CVE-2008-5758.md): Cross-site request forgery (CSRF) vulnerability in PHParanoid before 0.5 allows remote attackers to perform unspecified actions as… (no CVSS) - [CVE-2008-5759](https://cve.now/CVE-2008-5759.md): Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arbitrary web script… (no CVSS) - [CVE-2008-5760](https://cve.now/CVE-2008-5760.md): Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web… (no CVSS) - [CVE-2008-5751](https://cve.now/CVE-2008-5751.md): SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2008-5752](https://cve.now/CVE-2008-5752.md): Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when… (no CVSS) - [CVE-2008-5753](https://cve.now/CVE-2008-5753.md): Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a… (no CVSS) - [CVE-2008-5754](https://cve.now/CVE-2008-5754.md): Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file (aka… (no CVSS) - [CVE-2008-5755](https://cve.now/CVE-2008-5755.md): Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a… (no CVSS) - [CVE-2008-5756](https://cve.now/CVE-2008-5756.md): Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2008-12-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.