# CVEs published 2008-01-25

13 CVEs were published on January 25, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0458](https://cve.now/CVE-2008-0458.md): Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary loc (no CVSS)
- [CVE-2008-0459](https://cve.now/CVE-2008-0459.md): Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic\_quotes\_gpc is disabled, allows remote attackers (no CVSS)
- [CVE-2008-0460](https://cve.now/CVE-2008-0460.md): Cross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 through 1.9.4, and 1.8 (no CVSS)
- [CVE-2008-0461](https://cve.now/CVE-2008-0461.md): SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic\_quotes\_gpc is disabled, allows r (no CVSS)
- [CVE-2008-0462](https://cve.now/CVE-2008-0462.md): Cross-site scripting (XSS) vulnerability in the Archive 5.x before 5.x-1.8 module for Drupal allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-0463](https://cve.now/CVE-2008-0463.md): Cross-site scripting (XSS) vulnerability in the Workflow 4.7.x before 4.7.x-1.2 and 5.x before 5.x-1.2 module for Drupal allows remote attac (no CVSS)
- [CVE-2008-0464](https://cve.now/CVE-2008-0464.md): Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterprise SQL 11.5.1 allow (no CVSS)
- [CVE-2008-0465](https://cve.now/CVE-2008-0465.md): Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-4850](https://cve.now/CVE-2007-4850.md): curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe\_mode and open\_ba (no CVSS)
- [CVE-2007-5764](https://cve.now/CVE-2007-5764.md): Buffer overflow in the pioout program in printers.rte in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long command (no CVSS)
- [CVE-2008-0454](https://cve.now/CVE-2008-0454.md): Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows (no CVSS)
- [CVE-2008-0455](https://cve.now/CVE-2008-0455.md): Cross-site scripting (XSS) vulnerability in the mod\_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0. (no CVSS)
- [CVE-2008-0456](https://cve.now/CVE-2008-0456.md): CRLF injection vulnerability in the mod\_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earli (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-01-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.