# CVEs published 2008-09-05

22 CVEs were published on September 5, 2008: 0 critical, 2 high. Days are UTC.

- [CVE-2007-5474](https://cve.now/CVE-2007-5474.md): The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the A (no CVSS)
- [CVE-2008-1144](https://cve.now/CVE-2008-1144.md): The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly par (no CVSS)
- [CVE-2008-1197](https://cve.now/CVE-2008-1197.md): The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly par (no CVSS)
- [CVE-2008-2436](https://cve.now/CVE-2008-2436.md): Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x befor (no CVSS)
- [CVE-2008-3530](https://cve.now/CVE-2008-3530.md): sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properl (no CVSS)
- [CVE-2008-3531](https://cve.now/CVE-2008-3531.md): Stack-based buffer overflow in sys/kern/vfs\_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users (no CVSS)
- [CVE-2008-3664](https://cve.now/CVE-2008-3664.md): Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real n (no CVSS)
- [CVE-2008-3890](https://cve.now/CVE-2008-3890.md): The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault (GPF), which allows (no CVSS)
- [CVE-2008-3946](https://cve.now/CVE-2008-3946.md): The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan o (no CVSS)
- [CVE-2008-3947](https://cve.now/CVE-2008-3947.md): DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line. (no CVSS)
- [CVE-2008-3948](https://cve.now/CVE-2008-3948.md): SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands and modify name and (no CVSS)
- [CVE-2008-3935](https://cve.now/CVE-2008-3935.md): Cross-site scripting (XSS) vulnerability in DIC shop\_v50 3.0 and earlier and shop\_v52 2.0 and earlier allows remote attackers to inject arbi (CVSS 6.1)
- [CVE-2008-3936](https://cve.now/CVE-2008-3936.md): The web interface in Dreambox DM500C allows remote attackers to cause a denial of service (application hang) via a long URI. (no CVSS)
- [CVE-2008-3937](https://cve.now/CVE-2008-3937.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1.0.6 allow remote attackers to inject arbitr (CVSS 6.1)
- [CVE-2008-3938](https://cve.now/CVE-2008-3938.md): Cross-site request forgery (CSRF) vulnerability in user\_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers t (CVSS 8.8)
- [CVE-2008-3939](https://cve.now/CVE-2008-3939.md): Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary fil (CVSS 7.5)
- [CVE-2008-3940](https://cve.now/CVE-2008-3940.md): Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format stri (no CVSS)
- [CVE-2008-3941](https://cve.now/CVE-2008-3941.md): Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2008-3942](https://cve.now/CVE-2008-3942.md): SQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL commands via the id par (no CVSS)
- [CVE-2008-3943](https://cve.now/CVE-2008-3943.md): SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2008-3944](https://cve.now/CVE-2008-3944.md): SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter i (no CVSS)
- [CVE-2008-3945](https://cve.now/CVE-2008-3945.md): SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter i (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-09-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.