# CVEs published 2008-09-11

19 CVEs were published on September 11, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3584](https://cve.now/CVE-2008-3584.md): NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attack (no CVSS)
- [CVE-2008-4039](https://cve.now/CVE-2008-4039.md): SQL injection vulnerability in index.php in Spice Classifieds allows remote attackers to execute arbitrary SQL commands via the cat\_path par (no CVSS)
- [CVE-2008-4040](https://cve.now/CVE-2008-4040.md): Directory traversal vulnerability in the Kyocera Command Center in Kyocera FS-118MFP allows remote attackers to read arbitrary files via a . (no CVSS)
- [CVE-2008-4041](https://cve.now/CVE-2008-4041.md): The IMAP server in Softalk Mail Server (formerly WorkgroupMail) 8.5.1.431 allows remote authenticated users to cause a denial of service (re (no CVSS)
- [CVE-2008-4043](https://cve.now/CVE-2008-4043.md): Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid para (no CVSS)
- [CVE-2008-4044](https://cve.now/CVE-2008-4044.md): SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-4045](https://cve.now/CVE-2008-4045.md): Multiple cross-site scripting (XSS) vulnerabilities in @Mail 5.42 allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS)
- [CVE-2008-4046](https://cve.now/CVE-2008-4046.md): SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. (no CVSS)
- [CVE-2008-4047](https://cve.now/CVE-2008-4047.md): Unspecified vulnerability in Novell Forum (formerly SiteScape Forum) 7.0, 7.1, 7.2, 7.3, and 8.0 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2008-4048](https://cve.now/CVE-2008-4048.md): Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 al (no CVSS)
- [CVE-2008-4049](https://cve.now/CVE-2008-4049.md): A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execu (no CVSS)
- [CVE-2008-4050](https://cve.now/CVE-2008-4050.md): A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) c (no CVSS)
- [CVE-2008-4051](https://cve.now/CVE-2008-4051.md): Cross-site scripting (XSS) vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-4052](https://cve.now/CVE-2008-4052.md): Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 all (no CVSS)
- [CVE-2008-4053](https://cve.now/CVE-2008-4053.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote atta (no CVSS)
- [CVE-2008-4054](https://cve.now/CVE-2008-4054.md): SQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-4055](https://cve.now/CVE-2008-4055.md): SQL injection vulnerability in tops\_top.php in Million Pixel Ad Script (Million Pixel Script) allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2008-4056](https://cve.now/CVE-2008-4056.md): Cross-site scripting (XSS) vulnerability in admin/login.php in Matterdaddy Market 1.1 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-4057](https://cve.now/CVE-2008-4057.md): Unspecified vulnerability in Objective Development Sharity 3 before 3.5 has unknown impact and attack vectors, related to a "serious securit (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-09-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.