# CVEs published 2008-10-07

28 CVEs were published on October 7, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3061](https://cve.now/CVE-2008-3061.md): Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct (no CVSS)
- [CVE-2008-3060](https://cve.now/CVE-2008-3060.md): V-webmail 1.5.0 allows remote attackers to obtain sensitive information via (1) malformed input in the login page (includes/local.hooks.php) (no CVSS)
- [CVE-2008-3063](https://cve.now/CVE-2008-3063.md): SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username (no CVSS)
- [CVE-2008-4477](https://cve.now/CVE-2008-4477.md): alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file. (no CVSS)
- [CVE-2008-4474](https://cve.now/CVE-2008-4474.md): freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files in (1) ba (no CVSS)
- [CVE-2008-4475](https://cve.now/CVE-2008-4475.md): ibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2008-4476](https://cve.now/CVE-2008-4476.md): sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympa\_aliases.$$ temporary file. (no CVSS)
- [CVE-2008-3834](https://cve.now/CVE-2008-3834.md): The dbus\_signature\_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (appli (no CVSS)
- [CVE-2008-3543](https://cve.now/CVE-2008-3543.md): Unspecified vulnerability in NFS / ONCplus B.11.31\_04 and earlier on HP-UX B.11.31 allows remote attackers to cause a denial of service via (no CVSS)
- [CVE-2008-4384](https://cve.now/CVE-2008-4384.md): Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow re (no CVSS)
- [CVE-2008-4393](https://cve.now/CVE-2008-4393.md): Cross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier allows remote attackers to inj (no CVSS)
- [CVE-2008-4421](https://cve.now/CVE-2008-4421.md): Directory traversal vulnerability in MetaGauge 1.0.0.17, and probably other versions before 1.0.3.38, allows remote attackers to read arbitr (no CVSS)
- [CVE-2008-4471](https://cve.now/CVE-2008-4471.md): Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Rev (no CVSS)
- [CVE-2008-4472](https://cve.now/CVE-2008-4472.md): The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk Des (no CVSS)
- [CVE-2008-4457](https://cve.now/CVE-2008-4457.md): SQL injection vulnerability in inc/inc\_statistics.php in MemHT Portal 3.9.0 and earlier, when magic\_quotes\_gpc is disabled, allows remote at (no CVSS)
- [CVE-2008-4458](https://cve.now/CVE-2008-4458.md): SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2008-4459](https://cve.now/CVE-2008-4459.md): SQL injection vulnerability in pick\_users.php in the groups module in eXtrovert Thyme 1.3 allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2008-4460](https://cve.now/CVE-2008-4460.md): SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the game\_ (no CVSS)
- [CVE-2008-4461](https://cve.now/CVE-2008-4461.md): SQL injection vulnerability in advanced\_search\_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute (no CVSS)
- [CVE-2008-4462](https://cve.now/CVE-2008-4462.md): SQL injection vulnerability in view\_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the ne (no CVSS)
- [CVE-2008-4463](https://cve.now/CVE-2008-4463.md): SQL injection vulnerability in view\_news.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the ne (no CVSS)
- [CVE-2008-4464](https://cve.now/CVE-2008-4464.md): SQL injection vulnerability in view\_mags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the cat (no CVSS)
- [CVE-2008-4465](https://cve.now/CVE-2008-4465.md): SQL injection vulnerability in view\_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat (no CVSS)
- [CVE-2008-4466](https://cve.now/CVE-2008-4466.md): SQL injection vulnerability in view\_products\_cat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2008-4467](https://cve.now/CVE-2008-4467.md): SQL injection vulnerability in show\_series\_ink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-4468](https://cve.now/CVE-2008-4468.md): SQL injection vulnerability in view\_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the i (no CVSS)
- [CVE-2008-4469](https://cve.now/CVE-2008-4469.md): SQL injection vulnerability in view\_cresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-4470](https://cve.now/CVE-2008-4470.md): Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a denial of service (application crash) or execut (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-10-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.