# CVEs published 2008-04-12

10 CVEs were published on April 12, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1757](https://cve.now/CVE-2008-1757.md): Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-1758](https://cve.now/CVE-2008-1758.md): SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C\_ID pa (no CVSS)
- [CVE-2008-1759](https://cve.now/CVE-2008-1759.md): SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat paramet (no CVSS)
- [CVE-2008-1760](https://cve.now/CVE-2008-1760.md): Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2008-1761](https://cve.now/CVE-2008-1761.md): Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed so (no CVSS)
- [CVE-2008-1762](https://cve.now/CVE-2008-1762.md): Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled imag (no CVSS)
- [CVE-2008-1763](https://cve.now/CVE-2008-1763.md): SQL injection vulnerability in \_blogadata/include/sond\_result.php in Blogator-script 0.95 allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2008-1764](https://cve.now/CVE-2008-1764.md): Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs." (no CVSS)
- [CVE-2008-1766](https://cve.now/CVE-2008-1766.md): Multiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors, related to "two minor security-related bu (no CVSS)
- [CVE-2007-6712](https://cve.now/CVE-2007-6712.md): Integer overflow in the hrtimer\_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.