# CVEs published 2008-04-15

18 CVEs were published on April 15, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1787](https://cve.now/CVE-2008-1787.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-1788](https://cve.now/CVE-2008-1788.md): SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2008-1789](https://cve.now/CVE-2008-1789.md): SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter (no CVSS)
- [CVE-2008-1790](https://cve.now/CVE-2008-1790.md): Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a cra (no CVSS)
- [CVE-2008-1791](https://cve.now/CVE-2008-1791.md): SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-1792](https://cve.now/CVE-2008-1792.md): Cross-site scripting (XSS) vulnerability in the insertion filter in the Flickr Drupal module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-alpha (no CVSS)
- [CVE-2008-1793](https://cve.now/CVE-2008-1793.md): Multiple cross-site scripting (XSS) vulnerabilities in view.cgi in Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS G (no CVSS)
- [CVE-2008-1794](https://cve.now/CVE-2008-1794.md): Multiple cross-site scripting (XSS) vulnerabilities in the Webform Drupal module 5.x before 5.x-1.10, 5.x-2.x before 5.x-2.0-beta3, and 6.x (no CVSS)
- [CVE-2008-1795](https://cve.now/CVE-2008-1795.md): Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remo (no CVSS)
- [CVE-2008-1796](https://cve.now/CVE-2008-1796.md): Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service. (no CVSS)
- [CVE-2008-1797](https://cve.now/CVE-2008-1797.md): Unspecified vulnerability in Secure Computing Webwasher 5.30 before build 3159 and 6.3.0 before build 3150 allows remote attackers to cause (no CVSS)
- [CVE-2008-1798](https://cve.now/CVE-2008-1798.md): Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include and execute arbitrary (no CVSS)
- [CVE-2008-1799](https://cve.now/CVE-2008-1799.md): Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-1800](https://cve.now/CVE-2008-1800.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-1782](https://cve.now/CVE-2008-1782.md): phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file param (no CVSS)
- [CVE-2008-1783](https://cve.now/CVE-2008-1783.md): Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/Dele (no CVSS)
- [CVE-2008-1784](https://cve.now/CVE-2008-1784.md): Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (2) editu.php, and (3) (no CVSS)
- [CVE-2008-1785](https://cve.now/CVE-2008-1785.md): delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s p (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.