# CVEs published 2008-01-30

15 CVEs were published on January 30, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0487](https://cve.now/CVE-2008-0487.md): Multiple SQL injection vulnerabilities in login.asp in ASPired2Protect allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2008-0488](https://cve.now/CVE-2008-0488.md): Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to include and execute arbitrary local files via d (no CVSS)
- [CVE-2008-0489](https://cve.now/CVE-2008-0489.md): Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote attackers to include and execute arbitrary local files (no CVSS)
- [CVE-2008-0490](https://cve.now/CVE-2008-0490.md): SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2008-0491](https://cve.now/CVE-2008-0491.md): SQL injection vulnerability in fim\_rss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2008-0492](https://cve.now/CVE-2008-0492.md): Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote (no CVSS)
- [CVE-2008-0493](https://cve.now/CVE-2008-0493.md): fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to execute arbitrary code via a crafted FlashPix (.FPX) fi (no CVSS)
- [CVE-2008-0494](https://cve.now/CVE-2008-0494.md): Cross-site scripting (XSS) vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-0495](https://cve.now/CVE-2008-0495.md): Unspecified vulnerability in the Pegasus CIM Server in IBM Hardware Management Console (HMC) 7 R3.2.0 allows remote attackers to cause a den (no CVSS)
- [CVE-2008-0496](https://cve.now/CVE-2008-0496.md): Cross-site scripting (XSS) vulnerability in index.php in AmpJuke 0.7.0 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2008-0497](https://cve.now/CVE-2008-0497.md): Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2008-0498](https://cve.now/CVE-2008-0498.md): SQL injection vulnerability in main\_bigware\_53.tpl.php in Bigware Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-0499](https://cve.now/CVE-2008-0499.md): SQL injection vulnerability in Mambo LaiThai 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS)
- [CVE-2008-0500](https://cve.now/CVE-2008-0500.md): Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 have unknown impact and attack vectors related to (1) mod\_login and (2) mod\_temp (no CVSS)
- [CVE-2008-0501](https://cve.now/CVE-2008-0501.md): Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-01-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.