# CVEs published 2008-10-09

30 CVEs were published on October 9, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4517](https://cve.now/CVE-2008-4517.md): SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2008-4518](https://cve.now/CVE-2008-4518.md): Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-4519](https://cve.now/CVE-2008-4519.md): Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files (no CVSS)
- [CVE-2008-4520](https://cve.now/CVE-2008-4520.md): Cross-site scripting (XSS) vulnerability in bulk\_update.pl in AutoNessus before 1.2.2 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-4521](https://cve.now/CVE-2008-4521.md): SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion (raidtracker\_panel) module 2.0 for PHP-Fusion (no CVSS)
- [CVE-2008-4522](https://cve.now/CVE-2008-4522.md): Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execu (no CVSS)
- [CVE-2008-4523](https://cve.now/CVE-2008-4523.md): SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the user\_na (no CVSS)
- [CVE-2008-4524](https://cve.now/CVE-2008-4524.md): SQL injection vulnerability in the "Check User" feature (includes/check\_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attack (no CVSS, adaptcms/adaptcms)
- [CVE-2008-4525](https://cve.now/CVE-2008-4525.md): SQL injection vulnerability in index.php in AmpJuke 0.7.5 allows remote attackers to execute arbitrary SQL commands via the special paramete (no CVSS)
- [CVE-2008-4526](https://cve.now/CVE-2008-4526.md): Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local files via a .. (no CVSS)
- [CVE-2008-4527](https://cve.now/CVE-2008-4527.md): SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2008-4528](https://cve.now/CVE-2008-4528.md): Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote attackers to include an (no CVSS)
- [CVE-2008-4529](https://cve.now/CVE-2008-4529.md): Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP code via a URL in t (no CVSS)
- [CVE-2008-4530](https://cve.now/CVE-2008-4530.md): Cross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote authenticated users wit (no CVSS)
- [CVE-2008-4531](https://cve.now/CVE-2008-4531.md): SQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2008-4532](https://cve.now/CVE-2008-4532.md): Cross-site scripting (XSS) vulnerability in index.php in MaxiScript Website Directory allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-4503](https://cve.now/CVE-2008-4503.md): The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or (no CVSS)
- [CVE-2008-4504](https://cve.now/CVE-2008-4504.md): Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. (no CVSS)
- [CVE-2008-4505](https://cve.now/CVE-2008-4505.md): Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) might allow attackers to cause a denial of service (system cra (no CVSS)
- [CVE-2008-4506](https://cve.now/CVE-2008-4506.md): Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows a place manager to "demote or delete a place superuser (no CVSS)
- [CVE-2008-4507](https://cve.now/CVE-2008-4507.md): Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows editors to delete pages that were created by a differen (no CVSS)
- [CVE-2008-4508](https://cve.now/CVE-2008-4508.md): Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attack (no CVSS)
- [CVE-2008-4509](https://cve.now/CVE-2008-4509.md): Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows remote attackers to (no CVSS)
- [CVE-2008-4510](https://cve.now/CVE-2008-4510.md): Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service (page fault and system cra (no CVSS)
- [CVE-2008-4511](https://cve.now/CVE-2008-4511.md): Todd Woolums ASP News Management, possibly 2.21, stores db/news.mdb under the web root with insufficient access control, which allows remote (no CVSS)
- [CVE-2008-4512](https://cve.now/CVE-2008-4512.md): ASP/MS Access Shoutbox, probably 1.1 beta, stores db/shoutdb.mdb under the web root with insufficient access control, which allows remote at (no CVSS)
- [CVE-2008-4513](https://cve.now/CVE-2008-4513.md): Cross-site scripting (XSS) vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-4514](https://cve.now/CVE-2008-4514.md): The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via a font tag with a long c (no CVSS)
- [CVE-2008-4515](https://cve.now/CVE-2008-4515.md): Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which allows remote attackers to bypass (no CVSS)
- [CVE-2008-4516](https://cve.now/CVE-2008-4516.md): SQL injection vulnerability in galerie.php in Galerie 3.2 allows remote attackers to execute arbitrary SQL commands via the pic parameter. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-10-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.