# CVEs published 2008-05-27

19 CVEs were published on May 27, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2443](https://cve.now/CVE-2008-2443.md): SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID p (no CVSS)
- [CVE-2008-2444](https://cve.now/CVE-2008-2444.md): SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the lang (no CVSS)
- [CVE-2008-2445](https://cve.now/CVE-2008-2445.md): Cross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allows remot (no CVSS)
- [CVE-2008-2446](https://cve.now/CVE-2008-2446.md): Multiple SQL injection vulnerabilities in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allow remote authenticated us (no CVSS)
- [CVE-2008-2447](https://cve.now/CVE-2008-2447.md): SQL injection vulnerability in products.php in the Mytipper ZoGo-shop plugin 1.15.5 and 1.16 Beta 13 for e107 allows remote attackers to exe (no CVSS)
- [CVE-2008-2448](https://cve.now/CVE-2008-2448.md): Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter t (no CVSS)
- [CVE-2008-2449](https://cve.now/CVE-2008-2449.md): Multiple cross-site scripting (XSS) vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2008-2450](https://cve.now/CVE-2008-2450.md): Multiple cross-site scripting (XSS) vulnerabilities in the Statistics (aka ke\_stats) extension 0.1.2 and earlier for TYPO3 allow remote atta (no CVSS)
- [CVE-2008-2451](https://cve.now/CVE-2008-2451.md): Multiple SQL injection vulnerabilities in the Statistics (aka ke\_stats) extension 0.1.2 and earlier for TYPO3 allow remote attackers to exec (no CVSS)
- [CVE-2008-2452](https://cve.now/CVE-2008-2452.md): Cross-site scripting (XSS) vulnerability in the Questionaire (aka pbsurvey) extension 1.2.0 and earlier for TYPO3 allows remote attackers to (no CVSS)
- [CVE-2008-2453](https://cve.now/CVE-2008-2453.md): Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL commands via the fatherID p (no CVSS)
- [CVE-2008-2454](https://cve.now/CVE-2008-2454.md): SQL injection vulnerability in the xsstream-dm (com\_xsstream-dm) component 0.01 Beta for Joomla! allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2008-2455](https://cve.now/CVE-2008-2455.md): SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2008-2456](https://cve.now/CVE-2008-2456.md): SQL injection vulnerability in index.php in ComicShout 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the com (no CVSS)
- [CVE-2008-2457](https://cve.now/CVE-2008-2457.md): SQL injection vulnerability in jokes\_category.php in PHP-Jokesite 2.0 allows remote attackers to execute arbitrary SQL commands via the cat\_ (no CVSS)
- [CVE-2008-2458](https://cve.now/CVE-2008-2458.md): Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitr (no CVSS)
- [CVE-2008-2459](https://cve.now/CVE-2008-2459.md): Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local fi (no CVSS)
- [CVE-2008-2460](https://cve.now/CVE-2008-2460.md): SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter (no CVSS)
- [CVE-2008-2461](https://cve.now/CVE-2008-2461.md): SQL injection vulnerability in index.php in Netious CMS 0.4 allows remote attackers to execute arbitrary SQL commands via the pageid paramet (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.