# CVEs published 2008-08-10

24 CVEs were published on August 10, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3576](https://cve.now/CVE-2008-3576.md): Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2008-3577](https://cve.now/CVE-2008-3577.md): Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the (no CVSS)
- [CVE-2008-3578](https://cve.now/CVE-2008-3578.md): HydraIRC 0.3.164 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a lon (no CVSS)
- [CVE-2008-3579](https://cve.now/CVE-2008-3579.md): Calacode @Mail 5.41 on Linux does not require administrative authentication for build-plesk-upgrade.php, which allows remote attackers to ob (no CVSS)
- [CVE-2008-3580](https://cve.now/CVE-2008-3580.md): Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to (no CVSS)
- [CVE-2008-3581](https://cve.now/CVE-2008-3581.md): Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2008-3582](https://cve.now/CVE-2008-3582.md): SQL injection vulnerability in login.php in Keld PHP-MySQL News Script 0.7.1 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2008-3583](https://cve.now/CVE-2008-3583.md): Buffer overflow in the HTML parser in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a long URL in the SRC attribu (no CVSS)
- [CVE-2008-3273](https://cve.now/CVE-2008-3273.md): JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtai (no CVSS)
- [CVE-2008-3561](https://cve.now/CVE-2008-3561.md): SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitra (no CVSS)
- [CVE-2008-3562](https://cve.now/CVE-2008-3562.md): Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic\_quotes\_gpc is disabled, allows remote a (no CVSS)
- [CVE-2008-3563](https://cve.now/CVE-2008-3563.md): Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the check (no CVSS)
- [CVE-2008-3564](https://cve.now/CVE-2008-3564.md): Multiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execute arbitrary local fil (no CVSS)
- [CVE-2008-3565](https://cve.now/CVE-2008-3565.md): Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2008-3566](https://cve.now/CVE-2008-3566.md): Cross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-3567](https://cve.now/CVE-2008-3567.md): Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross- (no CVSS)
- [CVE-2008-3568](https://cve.now/CVE-2008-3568.md): Absolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in UNAK-CMS 1.5.5 allows (no CVSS)
- [CVE-2008-3569](https://cve.now/CVE-2008-3569.md): Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register\_globals is enabled, allow remote attackers to inject arbit (no CVSS)
- [CVE-2008-3570](https://cve.now/CVE-2008-3570.md): PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2008-3571](https://cve.now/CVE-2008-3571.md): The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 1900. (no CVSS)
- [CVE-2008-3572](https://cve.now/CVE-2008-3572.md): Cross-site scripting (XSS) vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-3573](https://cve.now/CVE-2008-3573.md): The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts\_random (no CVSS)
- [CVE-2008-3574](https://cve.now/CVE-2008-3574.md): Multiple cross-site scripting (XSS) vulnerabilities in Pluck 4.5.2, when register\_globals is enabled, allow remote attackers to inject arbit (no CVSS)
- [CVE-2008-3575](https://cve.now/CVE-2008-3575.md): PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remote attackers to execute arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-08-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.