# CVEs published 2008-08-22

10 CVEs were published on August 22, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3766](https://cve.now/CVE-2008-3766.md): Realtime Internet Band Rehearsal Low-Latency (Internet) Connection tool (llcon) before 2.1.2 allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2008-3767](https://cve.now/CVE-2008-3767.md): SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid param (no CVSS)
- [CVE-2008-3768](https://cve.now/CVE-2008-3768.md): Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to e (no CVSS)
- [CVE-2008-3769](https://cve.now/CVE-2008-3769.md): PHP remote file inclusion vulnerability in admin/create\_order\_new.php in Freeway 1.4.1.171, when register\_globals is enabled, allows remote (no CVSS)
- [CVE-2008-3770](https://cve.now/CVE-2008-3770.md): Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register\_globals is enabled, allow remote attackers to include and e (no CVSS)
- [CVE-2008-3771](https://cve.now/CVE-2008-3771.md): Cross-site scripting (XSS) vulnerability in members.php in Pars4u Videosharing 1 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2008-3772](https://cve.now/CVE-2008-3772.md): SQL injection vulnerability in categories\_portal.php in Pars4u Videosharing 1 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-3773](https://cve.now/CVE-2008-3773.md): Cross-site scripting (XSS) vulnerability in vBulletin 3.7.2 PL1 and 3.6.10 PL3, when "Show New Private Message Notification Pop-Up" is enabl (no CVSS)
- [CVE-2008-3774](https://cve.now/CVE-2008-3774.md): SQL injection vulnerability in index.php in Simasy CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2008-3775](https://cve.now/CVE-2008-3775.md): Folder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local administrators to obtain sensitive informat (CVSS 4.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-08-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.