# CVEs published 2008-12-31

26 CVEs were published on December 31, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5782](https://cve.now/CVE-2008-5782.md): SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands via the adid… (no CVSS)
- [CVE-2008-5783](https://cve.now/CVE-2008-5783.md): admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting… (no CVSS)
- [CVE-2008-5784](https://cve.now/CVE-2008-5784.md): V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the… (no CVSS)
- [CVE-2008-5785](https://cve.now/CVE-2008-5785.md): SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-5786](https://cve.now/CVE-2008-5786.md): Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before… (no CVSS)
- [CVE-2008-5787](https://cve.now/CVE-2008-5787.md): Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-5788](https://cve.now/CVE-2008-5788.md): SQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the id… (no CVSS)
- [CVE-2008-5789](https://cve.now/CVE-2008-5789.md): Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com\_feederator) component 1.0.5 for Joomla! allow… (no CVSS)
- [CVE-2008-5790](https://cve.now/CVE-2008-5790.md): Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com\_competitions) component 1.0 for Joomla! allow remote… (no CVSS)
- [CVE-2008-5791](https://cve.now/CVE-2008-5791.md): Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1.0.1) have unknown impact and attack… (no CVSS)
- [CVE-2008-5792](https://cve.now/CVE-2008-5792.md): PHP remote file inclusion vulnerability in show\_joined.php in Indiscripts Enthusiast 3.1.4, and possibly earlier, allows remote attackers… (no CVSS)
- [CVE-2008-5793](https://cve.now/CVE-2008-5793.md): Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com\_clickheat) component 1.0.1 for Joomla! allow… (no CVSS)
- [CVE-2008-5794](https://cve.now/CVE-2008-5794.md): Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via… (no CVSS)
- [CVE-2008-5795](https://cve.now/CVE-2008-5795.md): Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna\_pagecomments) extension 1.1.2 and earlier for TYPO3 allows… (no CVSS)
- [CVE-2008-5796](https://cve.now/CVE-2008-5796.md): SQL injection vulnerability in the eluna Page Comments (eluna\_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers… (no CVSS)
- [CVE-2008-5797](https://cve.now/CVE-2008-5797.md): SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-5798](https://cve.now/CVE-2008-5798.md): SQL injection vulnerability in the CMS Poll system (cms\_poll) extension before 0.1.1 for TYPO3 allows remote attackers to execute… (no CVSS)
- [CVE-2008-5799](https://cve.now/CVE-2008-5799.md): Cross-site scripting (XSS) vulnerability in the Wir ber uns (fsmi\_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers… (no CVSS)
- [CVE-2008-5800](https://cve.now/CVE-2008-5800.md): SQL injection vulnerability in the Wir ber uns \[sic\] (fsmi\_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to… (no CVSS)
- [CVE-2008-5801](https://cve.now/CVE-2008-5801.md): Unspecified vulnerability in the Dictionary (rtgdictionary) extension 0.1.9 and earlier for TYPO3 allows attackers to execute arbitrary… (no CVSS)
- [CVE-2008-5802](https://cve.now/CVE-2008-5802.md): SQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-5803](https://cve.now/CVE-2008-5803.md): SQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2008-5804](https://cve.now/CVE-2008-5804.md): SQL injection vulnerability in admin/admin\_catalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2008-5805](https://cve.now/CVE-2008-5805.md): SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-5806](https://cve.now/CVE-2008-5806.md): SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-5807](https://cve.now/CVE-2008-5807.md): Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-12-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.