# CVEs published 2008-11-03

14 CVEs were published on November 3, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4879](https://cve.now/CVE-2008-4879.md): SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the cat parameter, a (no CVSS)
- [CVE-2008-4880](https://cve.now/CVE-2008-4880.md): SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the id parameter (no CVSS)
- [CVE-2008-4881](https://cve.now/CVE-2008-4881.md): SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-4882](https://cve.now/CVE-2008-4882.md): SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2008-4883](https://cve.now/CVE-2008-4883.md): SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-4884](https://cve.now/CVE-2008-4884.md): SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-4885](https://cve.now/CVE-2008-4885.md): SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-4886](https://cve.now/CVE-2008-4886.md): SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-4887](https://cve.now/CVE-2008-4887.md): SQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id par (no CVSS)
- [CVE-2008-4888](https://cve.now/CVE-2008-4888.md): Cross-site scripting (XSS) vulnerability in error.php in NetRisk 2.0 and earlier allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2008-4889](https://cve.now/CVE-2008-4889.md): SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2008-4890](https://cve.now/CVE-2008-4890.md): SQL injection vulnerability in products.php in 1st News 4 Professional (PR 1) allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-3867](https://cve.now/CVE-2008-3867.md): SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the emai (no CVSS)
- [CVE-2008-3868](https://cve.now/CVE-2008-3868.md): Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super administrato (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-11-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.