# CVEs published 2008-05-05

15 CVEs were published on May 5, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0599](https://cve.now/CVE-2008-0599.md): The init\_request\_info function in sapi/cgi/cgi\_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating th (no CVSS)
- [CVE-2008-2050](https://cve.now/CVE-2008-2050.md): Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors. (no CVSS)
- [CVE-2008-2051](https://cve.now/CVE-2008-2051.md): The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte (no CVSS)
- [CVE-2008-2081](https://cve.now/CVE-2008-2081.md): Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary (no CVSS)
- [CVE-2008-2082](https://cve.now/CVE-2008-2082.md): Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2008-2083](https://cve.now/CVE-2008-2083.md): SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic\_quotes\_gpc is disabled, allows remote attackers to execut (no CVSS)
- [CVE-2008-2084](https://cve.now/CVE-2008-2084.md): SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2008-2072](https://cve.now/CVE-2008-2072.md): Cross-site scripting (XSS) vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2008-2073](https://cve.now/CVE-2008-2073.md): Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and exec (no CVSS)
- [CVE-2008-2074](https://cve.now/CVE-2008-2074.md): Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register\_globals is enabled, allow remote a (no CVSS)
- [CVE-2008-2075](https://cve.now/CVE-2008-2075.md): Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2008-2076](https://cve.now/CVE-2008-2076.md): Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbi (no CVSS)
- [CVE-2008-2077](https://cve.now/CVE-2008-2077.md): Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list view." (no CVSS)
- [CVE-2008-2078](https://cve.now/CVE-2008-2078.md): Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related t (no CVSS)
- [CVE-2008-2079](https://cve.now/CVE-2008-2079.md): MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.