# CVEs published 2008-11-13

38 CVEs were published on November 13, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5064](https://cve.now/CVE-2008-5064.md): SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands via the id parameter (no CVSS)
- [CVE-2008-5065](https://cve.now/CVE-2008-5065.md): TlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlGuestBook\_login cookie to a (no CVSS)
- [CVE-2008-5066](https://cve.now/CVE-2008-5066.md): PHP remote file inclusion vulnerability in upload/admin/frontpage\_right.php in Agares Media ThemeSiteScript 1.0 allows remote attackers to e (no CVSS)
- [CVE-2008-5067](https://cve.now/CVE-2008-5067.md): Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-5068](https://cve.now/CVE-2008-5068.md): Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web script or HTML via the ( (no CVSS)
- [CVE-2008-0017](https://cve.now/CVE-2008-0017.md): The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before (no CVSS)
- [CVE-2008-5012](https://cve.now/CVE-2008-5012.md): Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI (no CVSS)
- [CVE-2008-5013](https://cve.now/CVE-2008-5013.md): Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloade (no CVSS)
- [CVE-2008-5014](https://cve.now/CVE-2008-5014.md): jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.1 (no CVSS)
- [CVE-2008-5015](https://cve.now/CVE-2008-5015.md): Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged ab (no CVSS)
- [CVE-2008-5016](https://cve.now/CVE-2008-5016.md): The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attack (no CVSS)
- [CVE-2008-5017](https://cve.now/CVE-2008-5017.md): Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbir (no CVSS)
- [CVE-2008-5018](https://cve.now/CVE-2008-5018.md): The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x b (no CVSS)
- [CVE-2008-5019](https://cve.now/CVE-2008-5019.md): The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin p (no CVSS)
- [CVE-2008-5021](https://cve.now/CVE-2008-5021.md): nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 al (no CVSS)
- [CVE-2008-5022](https://cve.now/CVE-2008-5022.md): The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, (no CVSS)
- [CVE-2008-5023](https://cve.now/CVE-2008-5023.md): Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mech (no CVSS)
- [CVE-2008-5024](https://cve.now/CVE-2008-5024.md): Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not prope (no CVSS)
- [CVE-2008-5052](https://cve.now/CVE-2008-5052.md): The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaM (no CVSS)
- [CVE-2008-5053](https://cve.now/CVE-2008-5053.md): PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com\_rssreader) 1.0 component for Joomla! allows rem (no CVSS)
- [CVE-2008-5054](https://cve.now/CVE-2008-5054.md): Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-5055](https://cve.now/CVE-2008-5055.md): SQL injection vulnerability in department\_offline\_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute ar (no CVSS)
- [CVE-2008-5056](https://cve.now/CVE-2008-5056.md): Cross-site scripting (XSS) vulnerability in department\_offline\_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers (no CVSS)
- [CVE-2008-5057](https://cve.now/CVE-2008-5057.md): SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the film (no CVSS)
- [CVE-2008-5058](https://cve.now/CVE-2008-5058.md): SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-5059](https://cve.now/CVE-2008-5059.md): Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2008-5060](https://cve.now/CVE-2008-5060.md): Multiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2008-5061](https://cve.now/CVE-2008-5061.md): Cross-site scripting (XSS) vulnerability in php/cal\_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-5062](https://cve.now/CVE-2008-5062.md): Directory traversal vulnerability in php/cal\_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read arbitrary files via di (no CVSS)
- [CVE-2008-5063](https://cve.now/CVE-2008-5063.md): PHP remote file inclusion vulnerability in Admin/ADM\_Pagina.php in OTManager 2.4 allows remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2008-5046](https://cve.now/CVE-2008-5046.md): SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL commands via the manufa (no CVSS)
- [CVE-2008-5047](https://cve.now/CVE-2008-5047.md): SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-5048](https://cve.now/CVE-2008-5048.md): Buffer overflow in Atepmon.sys in ISecSoft Anti-Trojan Elite 4.2.1 and earlier, and possibly 4.2.2, allows local users to cause a denial of (no CVSS)
- [CVE-2008-5049](https://cve.now/CVE-2008-5049.md): Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other versions including 3.3.3, a (no CVSS)
- [CVE-2008-5050](https://cve.now/CVE-2008-5050.md): Off-by-one error in the get\_unicode\_name function (libclamav/vba\_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attacker (no CVSS)
- [CVE-2008-5051](https://cve.now/CVE-2008-5051.md): SQL injection vulnerability in the JooBlog (com\_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2008-4989](https://cve.now/CVE-2008-4989.md): The \_gnutls\_x509\_verify\_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the (no CVSS)
- [CVE-2008-5045](https://cve.now/CVE-2008-5045.md): Heap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows remote FTP servers to cause a denial of servic (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-11-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.