# CVEs published 2008-11-14

19 CVEs were published on November 14, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5087](https://cve.now/CVE-2008-5087.md): SQL injection vulnerability in TYPO3 Another Backend Login (wrg\_anotherbelogin) extension before 0.0.4 allows remote attackers to execute ar (no CVSS)
- [CVE-2008-5088](https://cve.now/CVE-2008-5088.md): Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2008-5089](https://cve.now/CVE-2008-5089.md): Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReport (no CVSS)
- [CVE-2008-5090](https://cve.now/CVE-2008-5090.md): Electron Inc. (no CVSS)
- [CVE-2008-5091](https://cve.now/CVE-2008-5091.md): Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (no CVSS)
- [CVE-2008-5092](https://cve.now/CVE-2008-5092.md): Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related (no CVSS)
- [CVE-2008-5093](https://cve.now/CVE-2008-5093.md): Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to (no CVSS)
- [CVE-2008-5094](https://cve.now/CVE-2008-5094.md): Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors. (no CVSS)
- [CVE-2008-5095](https://cve.now/CVE-2008-5095.md): Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioni (no CVSS)
- [CVE-2008-5096](https://cve.now/CVE-2008-5096.md): Unspecified vulnerability in the TYPO3 File List (file\_list) extension 0.2.1 and earlier allows remote attackers to obtain sensitive informa (no CVSS)
- [CVE-2008-5097](https://cve.now/CVE-2008-5097.md): SQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. (no CVSS)
- [CVE-2008-5076](https://cve.now/CVE-2008-5076.md): htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, mo (no CVSS)
- [CVE-2008-5069](https://cve.now/CVE-2008-5069.md): SQL injection vulnerability in go.php in Panuwat PromoteWeb MySQL, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arb (no CVSS)
- [CVE-2008-5070](https://cve.now/CVE-2008-5070.md): SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2008-5071](https://cve.now/CVE-2008-5071.md): Multiple eval injection vulnerabilities in itpm\_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbit (no CVSS)
- [CVE-2008-5072](https://cve.now/CVE-2008-5072.md): vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash) via a malformed FLV (no CVSS)
- [CVE-2008-5073](https://cve.now/CVE-2008-5073.md): Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2008-5074](https://cve.now/CVE-2008-5074.md): SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2008-5075](https://cve.now/CVE-2008-5075.md): Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic\_quotes\_gpc is disabled, allow remote attackers t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-11-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.