# CVEs published 2008-10-27

16 CVEs were published on October 27, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4747](https://cve.now/CVE-2008-4747.md): Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensiti (no CVSS)
- [CVE-2008-4748](https://cve.now/CVE-2008-4748.md): Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote at (no CVSS)
- [CVE-2008-4749](https://cve.now/CVE-2008-4749.md): Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly (no CVSS)
- [CVE-2008-4750](https://cve.now/CVE-2008-4750.md): Stack-based buffer overflow in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows (no CVSS)
- [CVE-2008-4751](https://cve.now/CVE-2008-4751.md): Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2008-4752](https://cve.now/CVE-2008-4752.md): TlNews 2.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlNews\_login cookie to admin. (no CVSS)
- [CVE-2008-4753](https://cve.now/CVE-2008-4753.md): SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url par (no CVSS)
- [CVE-2008-4754](https://cve.now/CVE-2008-4754.md): SQL injection vulnerability in forum.php in Scripts for Sites (SFS) Ez Forum allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2006-7234](https://cve.now/CVE-2006-7234.md): Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2 (no CVSS)
- [CVE-2008-4740](https://cve.now/CVE-2008-4740.md): Directory traversal vulnerability in templater.php in the ZZ\_Templater module in TinyCMS 1.1.2, when register\_globals is enabled and magic\_q (no CVSS)
- [CVE-2008-4741](https://cve.now/CVE-2008-4741.md): Directory traversal vulnerability in index.php in FAR-PHP 1.00, when magic\_quotes\_gpc is disabled, allows remote attackers to read arbitrary (no CVSS)
- [CVE-2008-4742](https://cve.now/CVE-2008-4742.md): Multiple cross-site scripting (XSS) vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-4743](https://cve.now/CVE-2008-4743.md): SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-4744](https://cve.now/CVE-2008-4744.md): SQL injection vulnerability in product\_detail.php in DXShopCart 4.30mc allows remote attackers to execute arbitrary SQL commands via the pid (no CVSS)
- [CVE-2008-4745](https://cve.now/CVE-2008-4745.md): Cross-site scripting (XSS) vulnerability in emailFriend.asp in Uniwin eCart Professional 2.0.17 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-4746](https://cve.now/CVE-2008-4746.md): Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary SQL commands via unsp (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-10-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.