# CVEs published 2008-08-20

18 CVEs were published on August 20, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3718](https://cve.now/CVE-2008-3718.md): Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) id para (no CVSS)
- [CVE-2008-3719](https://cve.now/CVE-2008-3719.md): SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2008-3720](https://cve.now/CVE-2008-3720.md): SQL injection vulnerability in index.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary SQL commands via the page (no CVSS)
- [CVE-2008-3721](https://cve.now/CVE-2008-3721.md): PHP remote file inclusion vulnerability in user\_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2008-3722](https://cve.now/CVE-2008-3722.md): SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. (no CVSS)
- [CVE-2008-3723](https://cve.now/CVE-2008-3723.md): Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files (no CVSS)
- [CVE-2008-3724](https://cve.now/CVE-2008-3724.md): SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl (no CVSS)
- [CVE-2008-3725](https://cve.now/CVE-2008-3725.md): SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2008-3726](https://cve.now/CVE-2008-3726.md): Cross-site scripting (XSS) vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attac (no CVSS)
- [CVE-2008-3727](https://cve.now/CVE-2008-3727.md): Directory traversal vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to (no CVSS)
- [CVE-2008-3728](https://cve.now/CVE-2008-3728.md): Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficie (no CVSS)
- [CVE-2008-3729](https://cve.now/CVE-2008-3729.md): Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to bypass authentication and obtain adm (no CVSS)
- [CVE-2008-3730](https://cve.now/CVE-2008-3730.md): Cross-site scripting (XSS) vulnerability in Nordicwind Document Management System (NOAH) before 3.2.2 allows remote attackers to inject arbi (no CVSS)
- [CVE-2008-3731](https://cve.now/CVE-2008-3731.md): Unspecified vulnerability in Serv-U File Server 7.0.0.1, and other versions before 7.2.0.1, allows remote authenticated users to cause a den (no CVSS)
- [CVE-2008-3732](https://cve.now/CVE-2008-3732.md): Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2008-3733](https://cve.now/CVE-2008-3733.md): Stack-based buffer overflow in EO Video (eo-video) 1.36 allows remote attackers to cause a denial of service (application crash) or execute (no CVSS)
- [CVE-2008-3734](https://cve.now/CVE-2008-3734.md): Format string vulnerability in Ipswitch WS\_FTP Home 2007.0.0.2 and WS\_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denia (no CVSS)
- [CVE-2008-3735](https://cve.now/CVE-2008-3735.md): Cross-site scripting (XSS) vulnerability in index.php in PHPizabi before 848 Core HotFix Pack 3 allows remote attackers to inject arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.