CVE-2008-4728

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders.

• http://secunia.com/advisories/32337Vendor Advisory
• http://www.securityfocus.com/bid/31799
• http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.htmlExploit, URL Repurposed
• http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.htmlExploit, URL Repurposed
• http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.htmlExploit, URL Repurposed
• http://www.vupen.com/english/advisories/2008/2857
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45961
• https://www.exploit-db.com/exploits/6773
• https://www.exploit-db.com/exploits/6774
• https://www.exploit-db.com/exploits/6776
• http://secunia.com/advisories/32337Vendor Advisory
• http://www.securityfocus.com/bid/31799
• http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.htmlExploit, URL Repurposed
• http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.htmlExploit, URL Repurposed
• http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.htmlExploit, URL Repurposed
• http://www.vupen.com/english/advisories/2008/2857
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45961
• https://www.exploit-db.com/exploits/6773
• https://www.exploit-db.com/exploits/6774
• https://www.exploit-db.com/exploits/6776

Published

Oct 24, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4722Unspecified vulnerability in Sun Integrated Lights-Out Manag…
• CVE-2008-4723Multiple cross-site scripting (XSS) vulnerabilities in Mozil…
• CVE-2008-4724Multiple cross-site scripting (XSS) vulnerabilities in Googl…
• CVE-2008-4725Cross-site scripting (XSS) vulnerability in Opera.dll in Ope…
• CVE-2008-4726Stack-based buffer overflow in the SFTP subsystem in GoodTec…
• CVE-2008-4727Cross-site scripting (XSS) vulnerability in the contact upda…
• CVE-2008-4729Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 Ac…
• CVE-2008-4730Cross-site scripting (XSS) vulnerability in MyID.php in phpM…
• CVE-2008-4731Multiple unspecified vulnerabilities in YaCy before 0.61 hav…
• CVE-2008-4732SQL injection vulnerability in ajax_comments.php in the WP C…
• CVE-2008-4733Cross-site scripting (XSS) vulnerability in wpcommentremix.p…
• CVE-2008-4734Cross-site request forgery (CSRF) vulnerability in the wpcr_…