# CVEs published 2008-12-16

24 CVEs were published on December 16, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5585](https://cve.now/CVE-2008-5585.md): Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2008-5586](https://cve.now/CVE-2008-5586.md): SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic\_quotes\_gpc is disabled, allows rem (no CVSS)
- [CVE-2008-5587](https://cve.now/CVE-2008-5587.md): Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register\_globals is enabled, allows remote (no CVSS)
- [CVE-2008-5588](https://cve.now/CVE-2008-5588.md): SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID pa (no CVSS)
- [CVE-2008-5589](https://cve.now/CVE-2008-5589.md): SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2008-5590](https://cve.now/CVE-2008-5590.md): SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execu (no CVSS)
- [CVE-2008-5591](https://cve.now/CVE-2008-5591.md): Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-5592](https://cve.now/CVE-2008-5592.md): Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers (no CVSS)
- [CVE-2008-5593](https://cve.now/CVE-2008-5593.md): Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local fi (no CVSS)
- [CVE-2008-5594](https://cve.now/CVE-2008-5594.md): Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local f (no CVSS)
- [CVE-2008-5595](https://cve.now/CVE-2008-5595.md): SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter. (no CVSS)
- [CVE-2008-5596](https://cve.now/CVE-2008-5596.md): Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attacke (no CVSS)
- [CVE-2008-5597](https://cve.now/CVE-2008-5597.md): Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the dat (no CVSS)
- [CVE-2008-5598](https://cve.now/CVE-2008-5598.md): Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. (no CVSS)
- [CVE-2008-5599](https://cve.now/CVE-2008-5599.md): SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the passw (no CVSS)
- [CVE-2008-5600](https://cve.now/CVE-2008-5600.md): Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to do (no CVSS)
- [CVE-2008-5601](https://cve.now/CVE-2008-5601.md): User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to down (no CVSS)
- [CVE-2008-5602](https://cve.now/CVE-2008-5602.md): Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (no CVSS)
- [CVE-2008-5603](https://cve.now/CVE-2008-5603.md): ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download th (no CVSS)
- [CVE-2008-5604](https://cve.now/CVE-2008-5604.md): Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic\_quotes\_gpc is disabled, allows remote attackers to (no CVSS)
- [CVE-2008-5605](https://cve.now/CVE-2008-5605.md): Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter t (no CVSS)
- [CVE-2008-5606](https://cve.now/CVE-2008-5606.md): Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote (no CVSS)
- [CVE-2008-5607](https://cve.now/CVE-2008-5607.md): SQL injection vulnerability in the JMovies (aka JM or com\_jmovies) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2008-5608](https://cve.now/CVE-2008-5608.md): ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-12-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.