# CVEs published 2008-08-05

8 CVEs were published on August 5, 2008: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2008-3484](https://cve.now/CVE-2008-3484.md): SQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat ac (no CVSS)
- [CVE-2008-3482](https://cve.now/CVE-2008-3482.md): Cross-site scripting (XSS) vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HC (no CVSS)
- [CVE-2008-3483](https://cve.now/CVE-2008-3483.md): Cross-site scripting (XSS) vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-3356](https://cve.now/CVE-2008-3356.md): verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Unix platforms sets the (no CVSS)
- [CVE-2008-3357](https://cve.now/CVE-2008-3357.md): Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on (no CVSS)
- [CVE-2008-3389](https://cve.now/CVE-2008-3389.md): Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1. (no CVSS)
- [CVE-2008-3431](https://cve.now/CVE-2008-3431.md): The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD\_NEITHER communication method for IOCTL (CVSS 8.8, KEV)
- [CVE-2008-3481](https://cve.now/CVE-2008-3481.md): themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a d (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-08-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.