# CVEs published 2008-08-19

13 CVEs were published on August 19, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3705](https://cve.now/CVE-2008-3705.md): Stack-based buffer overflow in the CLogger::WriteFormated function in echoware/Logger.cpp in EchoVNC Linux before 1.1.2 allows remote echoSe (no CVSS)
- [CVE-2008-3706](https://cve.now/CVE-2008-3706.md): SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL commands via the adid para (no CVSS)
- [CVE-2008-3707](https://cve.now/CVE-2008-3707.md): Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2008-3708](https://cve.now/CVE-2008-3708.md): Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-3709](https://cve.now/CVE-2008-3709.md): Multiple cross-site scripting (XSS) vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-3710](https://cve.now/CVE-2008-3710.md): Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files v (no CVSS)
- [CVE-2008-3711](https://cve.now/CVE-2008-3711.md): SQL injection vulnerability in index.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2008-3712](https://cve.now/CVE-2008-3712.md): Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register\_globals is enabled, allow remote attackers to in (no CVSS)
- [CVE-2008-3713](https://cve.now/CVE-2008-3713.md): SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the pro\_id parameter. (no CVSS)
- [CVE-2008-3714](https://cve.now/CVE-2008-3714.md): Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-3715](https://cve.now/CVE-2008-3715.md): Cross-site scripting (XSS) vulnerability in inc-core-admin-editor-previouscolorsjs.php in the FlexCMS 2.5 and earlier, when register\_globals (no CVSS)
- [CVE-2008-3716](https://cve.now/CVE-2008-3716.md): Cross-site request forgery (CSRF) vulnerability in Harmoni before 1.6.0 allows remote attackers to make administrative modifications via a ( (no CVSS)
- [CVE-2008-3717](https://cve.now/CVE-2008-3717.md): Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to ob (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-08-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.