# CVEs published 2008-08-21

18 CVEs were published on August 21, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3748](https://cve.now/CVE-2008-3748.md): SQL injection vulnerability in view\_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2008-3749](https://cve.now/CVE-2008-3749.md): SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-3750](https://cve.now/CVE-2008-3750.md): SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-3751](https://cve.now/CVE-2008-3751.md): SQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2008-3752](https://cve.now/CVE-2008-3752.md): SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-3753](https://cve.now/CVE-2008-3753.md): SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-3754](https://cve.now/CVE-2008-3754.md): SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-3755](https://cve.now/CVE-2008-3755.md): SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-3756](https://cve.now/CVE-2008-3756.md): SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-3757](https://cve.now/CVE-2008-3757.md): SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2008-3758](https://cve.now/CVE-2008-3758.md): Multiple cross-site scripting (XSS) vulnerabilities in Lussumo Vanilla 1.1.4 and earlier (1) allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-3759](https://cve.now/CVE-2008-3759.md): Cross-site request forgery (CSRF) vulnerability in ajax/UpdateCheck.php in Vanilla 1.1.4 and earlier has unknown impact and remote attack ve (no CVSS)
- [CVE-2008-3760](https://cve.now/CVE-2008-3760.md): Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the auth (no CVSS)
- [CVE-2008-3761](https://cve.now/CVE-2008-3761.md): hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x be (no CVSS)
- [CVE-2008-3762](https://cve.now/CVE-2008-3762.md): SQL injection vulnerability in onlinestatus\_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitra (no CVSS)
- [CVE-2008-3763](https://cve.now/CVE-2008-3763.md): Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when register\_globals is enabled, allows rem (no CVSS)
- [CVE-2008-3764](https://cve.now/CVE-2008-3764.md): Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2008-3765](https://cve.now/CVE-2008-3765.md): SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-08-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.