# CVEs published 2008-10-16

3 CVEs were published on October 16, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4590](https://cve.now/CVE-2008-4590.md): Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the username paramete (no CVSS)
- [CVE-2008-4591](https://cve.now/CVE-2008-4591.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remote attackers to inject (no CVSS)
- [CVE-2008-4592](https://cve.now/CVE-2008-4592.md): Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary loca (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-10-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.