# CVEs published 2008-05-19

13 CVEs were published on May 19, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4875](https://cve.now/CVE-2005-4875.md): TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the ph (no CVSS, typo3/cms)
- [CVE-2008-2334](https://cve.now/CVE-2008-2334.md): Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) forumid (no CVSS)
- [CVE-2008-2335](https://cve.now/CVE-2008-2335.md): Cross-site scripting (XSS) vulnerability in search\_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2008-2336](https://cve.now/CVE-2008-2336.md): SQL injection vulnerability in category.php in 68 Classifieds 4.0.1 allows remote attackers to execute arbitrary SQL commands via the cat pa (no CVSS)
- [CVE-2008-2337](https://cve.now/CVE-2008-2337.md): Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic\_quotes\_gpc is disabled, allow remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2008-2338](https://cve.now/CVE-2008-2338.md): Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified (no CVSS)
- [CVE-2008-2339](https://cve.now/CVE-2008-2339.md): SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2008-2340](https://cve.now/CVE-2008-2340.md): Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang paramet (no CVSS)
- [CVE-2008-2341](https://cve.now/CVE-2008-2341.md): PHP remote file inclusion vulnerability in ch\_readalso.php in News Manager 2.0 allows remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2008-2342](https://cve.now/CVE-2008-2342.md): Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-2343](https://cve.now/CVE-2008-2343.md): News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to (1) db/connect\_str. (no CVSS)
- [CVE-2008-2344](https://cve.now/CVE-2008-2344.md): Cross-site scripting (XSS) vulnerability in the air\_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to inject arbi (no CVSS)
- [CVE-2008-2345](https://cve.now/CVE-2008-2345.md): Unspecified vulnerability in the air\_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary PHP code (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.