CVEs published December 16, 2008
24 CVEs were published on December 16, 2008: 0 critical, 0 high.
- Published
- 24
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 24
- CVE-2008-5585Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitrary PHP code via a URL
- CVE-2008-5586SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is disabled, allows rem
- CVE-2008-5587Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote
- CVE-2008-5588SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID pa
- CVE-2008-5589SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the (1)
- CVE-2008-5590SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execu
- CVE-2008-5591Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script
- CVE-2008-5592Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers
- CVE-2008-5593Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local fi
- CVE-2008-5594Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local f
- CVE-2008-5595SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter.
- CVE-2008-5596Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attacke
- CVE-2008-5597Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the dat
- CVE-2008-5598Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a ..
- CVE-2008-5599SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the passw
- CVE-2008-5600Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to do
- CVE-2008-5601User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to down
- CVE-2008-5602Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download
- CVE-2008-5603ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download th
- CVE-2008-5604Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic_quotes_gpc is disabled, allows remote attackers to
- CVE-2008-5605Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter t
- CVE-2008-5606Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote
- CVE-2008-5607SQL injection vulnerability in the JMovies (aka JM or com_jmovies) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQ
- CVE-2008-5608ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download t