# CVEs published 2008-09-15

23 CVEs were published on September 15, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4082](https://cve.now/CVE-2008-4082.md): SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic\_quotes\_gpc is disabled, allows remote authenticated users to execu (no CVSS)
- [CVE-2008-4083](https://cve.now/CVE-2008-4083.md): Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web scrip (no CVSS)
- [CVE-2008-4084](https://cve.now/CVE-2008-4084.md): SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote attackers to execute ar (no CVSS)
- [CVE-2008-4085](https://cve.now/CVE-2008-4085.md): plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (no CVSS)
- [CVE-2008-4086](https://cve.now/CVE-2008-4086.md): SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the s (no CVSS)
- [CVE-2008-4087](https://cve.now/CVE-2008-4087.md): Stack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers to cause a denial of service or execute arbi (no CVSS)
- [CVE-2008-4088](https://cve.now/CVE-2008-4088.md): SQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8\_8rc2 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-4089](https://cve.now/CVE-2008-4089.md): Cross-site scripting (XSS) vulnerability in print.php in myPHPNuke (MPN) before 1.8.8\_8rc2 allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2008-4090](https://cve.now/CVE-2008-4090.md): SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL commands via the id param (no CVSS)
- [CVE-2008-4091](https://cve.now/CVE-2008-4091.md): SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the sit (no CVSS)
- [CVE-2008-4092](https://cve.now/CVE-2008-4092.md): SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8\_8rc2 allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2008-4093](https://cve.now/CVE-2008-4093.md): SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic\_quotes\_gpc is disabled, allows remote attackers to (no CVSS)
- [CVE-2008-4071](https://cve.now/CVE-2008-4071.md): A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cau (no CVSS)
- [CVE-2008-4072](https://cve.now/CVE-2008-4072.md): Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL commands via (1) the sid (no CVSS)
- [CVE-2008-4073](https://cve.now/CVE-2008-4073.md): SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-4074](https://cve.now/CVE-2008-4074.md): SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-4075](https://cve.now/CVE-2008-4075.md): Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-4076](https://cve.now/CVE-2008-4076.md): Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 an (no CVSS)
- [CVE-2008-4077](https://cve.now/CVE-2008-4077.md): The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of serv (no CVSS)
- [CVE-2008-4078](https://cve.now/CVE-2008-4078.md): SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allo (no CVSS)
- [CVE-2008-4079](https://cve.now/CVE-2008-4079.md): Cross-site scripting (XSS) vulnerability in Movable Type (MT) 4.x through 4.20, and 3.36 and earlier; Movable Type Enterprise 4.x through 4. (no CVSS)
- [CVE-2008-4080](https://cve.now/CVE-2008-4080.md): SQL injection vulnerability in Stash 1.0.3, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-4081](https://cve.now/CVE-2008-4081.md): admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-09-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.