# CVEs published 2008-12-30 31 CVEs were published on December 30, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-5761](https://cve.now/CVE-2008-5761.md): Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary web (no CVSS) - [CVE-2008-5762](https://cve.now/CVE-2008-5762.md): Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which allow (no CVSS) - [CVE-2008-5763](https://cve.now/CVE-2008-5763.md): PHP remote file inclusion vulnerability in slogin\_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to e (no CVSS) - [CVE-2008-5764](https://cve.now/CVE-2008-5764.md): PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register\_globals is enabled, allows remote attackers to ex (no CVSS) - [CVE-2008-5765](https://cve.now/CVE-2008-5765.md): WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (no CVSS) - [CVE-2008-5766](https://cve.now/CVE-2008-5766.md): SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id pa (no CVSS) - [CVE-2008-5767](https://cve.now/CVE-2008-5767.md): SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands via the authorID par (no CVSS) - [CVE-2008-5768](https://cve.now/CVE-2008-5768.md): SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute arbitrary (no CVSS) - [CVE-2008-5769](https://cve.now/CVE-2008-5769.md): Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2008-5770](https://cve.now/CVE-2008-5770.md): Cross-site scripting (XSS) vulnerability in config/make\_config.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web scri (no CVSS) - [CVE-2008-5771](https://cve.now/CVE-2008-5771.md): Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via (no CVSS) - [CVE-2008-5772](https://cve.now/CVE-2008-5772.md): Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands vi (no CVSS) - [CVE-2008-5773](https://cve.now/CVE-2008-5773.md): Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download th (no CVSS) - [CVE-2008-5774](https://cve.now/CVE-2008-5774.md): Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via t (no CVSS) - [CVE-2008-5775](https://cve.now/CVE-2008-5775.md): SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL commands via the id para (no CVSS) - [CVE-2008-5776](https://cve.now/CVE-2008-5776.md): Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via di (no CVSS) - [CVE-2008-5777](https://cve.now/CVE-2008-5777.md): SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the cid parameter. (no CVSS) - [CVE-2008-5778](https://cve.now/CVE-2008-5778.md): SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL comman (no CVSS) - [CVE-2008-5779](https://cve.now/CVE-2008-5779.md): SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2008-5780](https://cve.now/CVE-2008-5780.md): Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloa (no CVSS) - [CVE-2008-5781](https://cve.now/CVE-2008-5781.md): SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execute arbitrary SQL com (no CVSS) - [CVE-2008-5757](https://cve.now/CVE-2008-5757.md): Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated us (no CVSS) - [CVE-2008-5758](https://cve.now/CVE-2008-5758.md): Cross-site request forgery (CSRF) vulnerability in PHParanoid before 0.5 allows remote attackers to perform unspecified actions as authentic (no CVSS) - [CVE-2008-5759](https://cve.now/CVE-2008-5759.md): Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2008-5760](https://cve.now/CVE-2008-5760.md): Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web sc (no CVSS) - [CVE-2008-5751](https://cve.now/CVE-2008-5751.md): SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL co (no CVSS) - [CVE-2008-5752](https://cve.now/CVE-2008-5752.md): Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic\_quotes\_ (no CVSS) - [CVE-2008-5753](https://cve.now/CVE-2008-5753.md): Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a bookmark (no CVSS) - [CVE-2008-5754](https://cve.now/CVE-2008-5754.md): Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file (aka Session- (no CVSS) - [CVE-2008-5755](https://cve.now/CVE-2008-5755.md): Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a lon (no CVSS) - [CVE-2008-5756](https://cve.now/CVE-2008-5756.md): Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute a (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-12-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.