# CVEs published 2008-12-23

8 CVEs were published on December 23, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5707](https://cve.now/CVE-2008-5707.md): SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the ca (no CVSS)
- [CVE-2008-2434](https://cve.now/CVE-2008-2434.md): The Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall\_ActiveX.dll allows remote attackers to download an arbitra (no CVSS)
- [CVE-2008-2435](https://cve.now/CVE-2008-2435.md): Use-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall\_ActiveX.dll allows remote (no CVSS)
- [CVE-2008-4303](https://cve.now/CVE-2008-4303.md): Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2008-4304](https://cve.now/CVE-2008-4304.md): general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspeci (no CVSS)
- [CVE-2008-4305](https://cve.now/CVE-2008-4305.md): Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier allows remote authenticated administrators to (no CVSS)
- [CVE-2008-5514](https://cve.now/CVE-2008-5514.md): Off-by-one error in the rfc822\_output\_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as u (no CVSS)
- [CVE-2008-5557](https://cve.now/CVE-2008-5557.md): Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter\_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows co (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-12-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.