# CVEs published 2008-12-31

26 CVEs were published on December 31, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5782](https://cve.now/CVE-2008-5782.md): SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands via the adid parame (no CVSS)
- [CVE-2008-5783](https://cve.now/CVE-2008-5783.md): admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting the (no CVSS)
- [CVE-2008-5784](https://cve.now/CVE-2008-5784.md): V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin (no CVSS)
- [CVE-2008-5785](https://cve.now/CVE-2008-5785.md): SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2008-5786](https://cve.now/CVE-2008-5786.md): Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12. (no CVSS)
- [CVE-2008-5787](https://cve.now/CVE-2008-5787.md): Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-5788](https://cve.now/CVE-2008-5788.md): SQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the id param (no CVSS)
- [CVE-2008-5789](https://cve.now/CVE-2008-5789.md): Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com\_feederator) component 1.0.5 for Joomla! allow re (no CVSS)
- [CVE-2008-5790](https://cve.now/CVE-2008-5790.md): Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com\_competitions) component 1.0 for Joomla! allow remote attac (no CVSS)
- [CVE-2008-5791](https://cve.now/CVE-2008-5791.md): Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1.0.1) have unknown impact and attack vector (no CVSS)
- [CVE-2008-5792](https://cve.now/CVE-2008-5792.md): PHP remote file inclusion vulnerability in show\_joined.php in Indiscripts Enthusiast 3.1.4, and possibly earlier, allows remote attackers to (no CVSS)
- [CVE-2008-5793](https://cve.now/CVE-2008-5793.md): Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com\_clickheat) component 1.0.1 for Joomla! allow remote (no CVSS)
- [CVE-2008-5794](https://cve.now/CVE-2008-5794.md): Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a (no CVSS)
- [CVE-2008-5795](https://cve.now/CVE-2008-5795.md): Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna\_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote (no CVSS)
- [CVE-2008-5796](https://cve.now/CVE-2008-5796.md): SQL injection vulnerability in the eluna Page Comments (eluna\_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to (no CVSS)
- [CVE-2008-5797](https://cve.now/CVE-2008-5797.md): SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2008-5798](https://cve.now/CVE-2008-5798.md): SQL injection vulnerability in the CMS Poll system (cms\_poll) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-5799](https://cve.now/CVE-2008-5799.md): Cross-site scripting (XSS) vulnerability in the Wir ber uns (fsmi\_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to (no CVSS)
- [CVE-2008-5800](https://cve.now/CVE-2008-5800.md): SQL injection vulnerability in the Wir ber uns \[sic\] (fsmi\_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to execute (no CVSS)
- [CVE-2008-5801](https://cve.now/CVE-2008-5801.md): Unspecified vulnerability in the Dictionary (rtgdictionary) extension 0.1.9 and earlier for TYPO3 allows attackers to execute arbitrary code (no CVSS)
- [CVE-2008-5802](https://cve.now/CVE-2008-5802.md): SQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via the cat\_ (no CVSS)
- [CVE-2008-5803](https://cve.now/CVE-2008-5803.md): SQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-5804](https://cve.now/CVE-2008-5804.md): SQL injection vulnerability in admin/admin\_catalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2008-5805](https://cve.now/CVE-2008-5805.md): SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2008-5806](https://cve.now/CVE-2008-5806.md): SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2008-5807](https://cve.now/CVE-2008-5807.md): Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-12-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.