# Vulnerabilities published in 2008


- [CVE-2008-3339](https://insights.sbomify.com/CVE-2008-3339/): Information disclosure in avidweb technologies:jobbex jobsite (medium 6.8)
- [CVE-2008-3338](https://insights.sbomify.com/CVE-2008-3338/): Memory corruption in tibco:hawk (critical 10.0)
- [CVE-2008-3337](https://insights.sbomify.com/CVE-2008-3337/): Other in powerdns:authoritative server (medium 6.4)
- [CVE-2008-3336](https://insights.sbomify.com/CVE-2008-3336/): Cross-site scripting in punbb:punbb (medium 4.3)
- [CVE-2008-3335](https://insights.sbomify.com/CVE-2008-3335/): Code injection in punbb:punbb (critical 10.0)
- [CVE-2008-3334](https://insights.sbomify.com/CVE-2008-3334/): Cross-site scripting in mybb:mybb (medium 4.3)
- [CVE-2008-3333](https://insights.sbomify.com/CVE-2008-3333/): Path traversal in mantis:mantis (high 7.5)
- [CVE-2008-3332](https://insights.sbomify.com/CVE-2008-3332/): Code injection in mantis:mantis (medium 6.5)
- [CVE-2008-3331](https://insights.sbomify.com/CVE-2008-3331/): Cross-site scripting in mantis:mantis (low 3.5)
- [CVE-2008-3330](https://insights.sbomify.com/CVE-2008-3330/): Cross-site scripting in debian:horde (medium 4.3)
- [CVE-2008-3329](https://insights.sbomify.com/CVE-2008-3329/): Other in twibright:links (critical 9.3)
- [CVE-2008-3328](https://insights.sbomify.com/CVE-2008-3328/): Trac Cross-site Scripting (XSS) vulnerability (medium 4.3)
- [CVE-2008-3327](https://insights.sbomify.com/CVE-2008-3327/): Information disclosure in moodle:moodle (medium 4.3)
- [CVE-2008-3326](https://insights.sbomify.com/CVE-2008-3326/): Cross-site scripting in moodle:moodle (low 2.6)
- [CVE-2008-3325](https://insights.sbomify.com/CVE-2008-3325/): Cross-site request forgery in debian:debian linux (medium 6.0)
- [CVE-2008-3324](https://insights.sbomify.com/CVE-2008-3324/): Security feature bypass in party gaming:party poker client (high 8.1)
- [CVE-2008-3323](https://insights.sbomify.com/CVE-2008-3323/): Security feature bypass in redhat:cygwin (high 7.6)
- [CVE-2008-3322](https://insights.sbomify.com/CVE-2008-3322/): Auth bypass in maian:recipe (high 7.5)
- [CVE-2008-3321](https://insights.sbomify.com/CVE-2008-3321/): Auth bypass in maian script world:maian uploader (high 7.5)
- [CVE-2008-3320](https://insights.sbomify.com/CVE-2008-3320/): Auth bypass in maian:guestbook (high 7.5)
- [CVE-2008-3319](https://insights.sbomify.com/CVE-2008-3319/): Auth bypass in maian:links (high 7.5)
- [CVE-2008-3318](https://insights.sbomify.com/CVE-2008-3318/): Auth bypass in maian:weblog (high 7.5)
- [CVE-2008-3317](https://insights.sbomify.com/CVE-2008-3317/): Auth bypass in maian script world:maian search (high 7.5)
- [CVE-2008-3316](https://insights.sbomify.com/CVE-2008-3316/): Cross-site scripting in portalparts:forum plugin (medium 4.3)
- [CVE-2008-3315](https://insights.sbomify.com/CVE-2008-3315/): Cross-site scripting in claroline:claroline (medium 4.3)
- [CVE-2008-3314](https://insights.sbomify.com/CVE-2008-3314/): Null dereference in zdaemon:zdaemon (medium 5.0)
- [CVE-2008-3313](https://insights.sbomify.com/CVE-2008-3313/): Code injection in creacms:creacms (high 7.5)
- [CVE-2008-3312](https://insights.sbomify.com/CVE-2008-3312/): Path traversal in lemoncms:lemon cms (medium 6.8)
- [CVE-2008-3311](https://insights.sbomify.com/CVE-2008-3311/): Code injection in adam scheinberg:flip (high 7.5)
- [CVE-2008-3310](https://insights.sbomify.com/CVE-2008-3310/): SQL injection in preproject:pre survey poll (high 7.5)
- [CVE-2008-3309](https://insights.sbomify.com/CVE-2008-3309/): SQL injection in digiappz:digileave (high 7.5)
- [CVE-2008-3308](https://insights.sbomify.com/CVE-2008-3308/): Code injection in carlos desseno:youtube blog (medium 6.8)
- [CVE-2008-3307](https://insights.sbomify.com/CVE-2008-3307/): SQL injection in youtube blog:youtube blog (high 7.5)
- [CVE-2008-3306](https://insights.sbomify.com/CVE-2008-3306/): SQL injection in youtube blog:youtube blog (high 7.5)
- [CVE-2008-3305](https://insights.sbomify.com/CVE-2008-3305/): Cross-site scripting in carlos desseno:youtube blog (medium 4.3)
- [CVE-2008-3304](https://insights.sbomify.com/CVE-2008-3304/): Information disclosure in tuxplanet:bilboblog (medium 5.0)
- [CVE-2008-3303](https://insights.sbomify.com/CVE-2008-3303/): Auth bypass in tuxplanet:bilboblog (medium 6.8)
- [CVE-2008-3302](https://insights.sbomify.com/CVE-2008-3302/): SQL injection in tuxplanet:bilboblog (medium 6.0)
- [CVE-2008-3301](https://insights.sbomify.com/CVE-2008-3301/): Cross-site scripting in tuxplanet:bilboblog (low 3.5)
- [CVE-2008-3300](https://insights.sbomify.com/CVE-2008-3300/): Auth bypass in alphadmin:alphadmin cms (high 7.5)
- [CVE-2008-3299](https://insights.sbomify.com/CVE-2008-3299/): Auth bypass in esyndicat:esyndicat (high 7.5)
- [CVE-2008-3298](https://insights.sbomify.com/CVE-2008-3298/): Code injection in social engine:social engine (medium 6.0)
- [CVE-2008-3297](https://insights.sbomify.com/CVE-2008-3297/): SQL injection in social engine:social engine (high 7.5)
- [CVE-2008-3296](https://insights.sbomify.com/CVE-2008-3296/): Path traversal in xoops:xoops (high 7.5)
- [CVE-2008-3295](https://insights.sbomify.com/CVE-2008-3295/): Cross-site scripting in xoops:xoops (medium 4.3)
- [CVE-2008-3294](https://insights.sbomify.com/CVE-2008-3294/): Race condition in vim:vim (low 3.7)
- [CVE-2008-3293](https://insights.sbomify.com/CVE-2008-3293/): Path traversal in ezwebalbum:ezwebalbum (medium 5.0)
- [CVE-2008-3292](https://insights.sbomify.com/CVE-2008-3292/): Auth bypass in ezwebalbum:ezwebalbum (medium 6.4)
- [CVE-2008-3291](https://insights.sbomify.com/CVE-2008-3291/): SQL injection in aprox:aprox cms engine (high 7.5)
- [CVE-2008-3290](https://insights.sbomify.com/CVE-2008-3290/): Memory corruption in emc dantz:retrospect backup client (medium 5.0)
- [CVE-2008-3289](https://insights.sbomify.com/CVE-2008-3289/): Information disclosure in storcentric:retrospect backup client (high 7.5)
- [CVE-2008-3288](https://insights.sbomify.com/CVE-2008-3288/): Weak cryptography in emc:dantz retrospect backup server (medium 5.0)
- [CVE-2008-3287](https://insights.sbomify.com/CVE-2008-3287/): Null dereference in emc dantz:retrospect backup client (medium 5.0)
- [CVE-2008-3286](https://insights.sbomify.com/CVE-2008-3286/): Null dereference in sierra:swat 4 (medium 5.0)
- [CVE-2008-3285](https://insights.sbomify.com/CVE-2008-3285/): Command injection in alain barbet:filesys smbclientparser (critical 9.3)
- [CVE-2008-3283](https://insights.sbomify.com/CVE-2008-3283/): Denial of service in fedora:directory server (high 7.8)
- [CVE-2008-3282](https://insights.sbomify.com/CVE-2008-3282/): Integer overflow in apache:openoffice (high 7.8)
- [CVE-2008-3281](https://insights.sbomify.com/CVE-2008-3281/): Denial of service in apple:iphone os (medium 6.5)
- [CVE-2008-3280](https://insights.sbomify.com/CVE-2008-3280/): Weak cryptography in openid (medium 5.9)
- [CVE-2008-3279](https://insights.sbomify.com/CVE-2008-3279/): Privilege escalation in mielke:brltty (medium 6.9)
- [CVE-2008-3278](https://insights.sbomify.com/CVE-2008-3278/): Misconfiguration in frysk (high 7.8)
- [CVE-2008-3277](https://insights.sbomify.com/CVE-2008-3277/): Privilege escalation in openfabrics:ibutils (medium 4.4)
- [CVE-2008-3276](https://insights.sbomify.com/CVE-2008-3276/): Integer overflow in linux:linux kernel (high 7.1)
- [CVE-2008-3275](https://insights.sbomify.com/CVE-2008-3275/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2008-3274](https://insights.sbomify.com/CVE-2008-3274/): Misconfiguration in redhat:enterprise ipa (medium 5.0)
- [CVE-2008-3273](https://insights.sbomify.com/CVE-2008-3273/): Information disclosure in jboss:enterprise application platform (medium 5.0)
- [CVE-2008-3272](https://insights.sbomify.com/CVE-2008-3272/): Information disclosure in canonical:ubuntu linux (low 2.1)
- [CVE-2008-3271](https://insights.sbomify.com/CVE-2008-3271/): Race condition in apache:tomcat (medium 4.3)
- [CVE-2008-3270](https://insights.sbomify.com/CVE-2008-3270/): Weak cryptography in redhat:enterprise linux (low 2.6)
- [CVE-2008-3269](https://insights.sbomify.com/CVE-2008-3269/): Denial of service in winsoftmagic:winremotepc full (medium 5.0)
- [CVE-2008-3268](https://insights.sbomify.com/CVE-2008-3268/): Auth bypass in brickhost:phpscheduleit (medium 6.8)
- [CVE-2008-3267](https://insights.sbomify.com/CVE-2008-3267/): SQL injection in mojoscripts:mojojobs (high 7.5)
- [CVE-2008-3266](https://insights.sbomify.com/CVE-2008-3266/): SQL injection in softacid:hotel reservation system multi (high 7.5)
- [CVE-2008-3265](https://insights.sbomify.com/CVE-2008-3265/): SQL injection in joomla:com dtregister (medium 6.8)
- [CVE-2008-3264](https://insights.sbomify.com/CVE-2008-3264/): Denial of service in asterisk:asterisk appliance developer kit (high 7.8)
- [CVE-2008-3263](https://insights.sbomify.com/CVE-2008-3263/): Denial of service in asterisk:asterisk (high 7.8)
- [CVE-2008-3262](https://insights.sbomify.com/CVE-2008-3262/): Cross-site request forgery in claroline:claroline (medium 5.8)
- [CVE-2008-3261](https://insights.sbomify.com/CVE-2008-3261/): Open redirect in claroline:claroline (medium 4.3)
- [CVE-2008-3260](https://insights.sbomify.com/CVE-2008-3260/): Cross-site scripting in claroline:claroline (medium 4.3)
- [CVE-2008-3259](https://insights.sbomify.com/CVE-2008-3259/): Misconfiguration in openbsd:openssh (low 1.2)
- [CVE-2008-3258](https://insights.sbomify.com/CVE-2008-3258/): SQL injection in zoph:zoph (high 7.5)
- [CVE-2008-3257](https://insights.sbomify.com/CVE-2008-3257/): Memory corruption in bea:weblogic server (critical 10.0)
- [CVE-2008-3256](https://insights.sbomify.com/CVE-2008-3256/): SQL injection in siteframe:siteframe beaumont (high 7.5)
- [CVE-2008-3255](https://insights.sbomify.com/CVE-2008-3255/): Cross-site scripting in ln-lab:webproxy (medium 4.3)
- [CVE-2008-3254](https://insights.sbomify.com/CVE-2008-3254/): SQL injection in precoc:precms (medium 6.8)
- [CVE-2008-3253](https://insights.sbomify.com/CVE-2008-3253/): Cross-site scripting in citrix:xenserver (medium 4.3)
- [CVE-2008-3252](https://insights.sbomify.com/CVE-2008-3252/): Memory corruption in fedora:newsx (critical 10.0)
- [CVE-2008-3251](https://insights.sbomify.com/CVE-2008-3251/): SQL injection in tpl design:tplsoccersite (high 7.5)
- [CVE-2008-3250](https://insights.sbomify.com/CVE-2008-3250/): SQL injection in arctictracker:arctic issue tracker (high 7.5)
- [CVE-2008-3249](https://insights.sbomify.com/CVE-2008-3249/): Security feature bypass in lenovo:thinkvantage system update (medium 5.1)
- [CVE-2008-3248](https://insights.sbomify.com/CVE-2008-3248/): Information disclosure in symantec:veritas file system (medium 4.6)
- [CVE-2008-3247](https://insights.sbomify.com/CVE-2008-3247/): Memory corruption in linux:linux kernel (high 7.2)
- [CVE-2008-3246](https://insights.sbomify.com/CVE-2008-3246/): Code injection in blackberry:enterprise server (critical 9.3)
- [CVE-2008-3245](https://insights.sbomify.com/CVE-2008-3245/): SQL injection in cable-modems:phphoo3 (high 7.5)
- [CVE-2008-3244](https://insights.sbomify.com/CVE-2008-3244/): Denial of service in f-prot:f-prot antivirus (medium 4.3)
- [CVE-2008-3243](https://insights.sbomify.com/CVE-2008-3243/): Denial of service in f-prot:f-prot antivirus (medium 4.3)
- [CVE-2008-3242](https://insights.sbomify.com/CVE-2008-3242/): Memory corruption in ppmate:ppmedia class (critical 10.0)
- [CVE-2008-3241](https://insights.sbomify.com/CVE-2008-3241/): SQL injection in ultrastats:ultrastats (high 7.5)
- [CVE-2008-3240](https://insights.sbomify.com/CVE-2008-3240/): SQL injection in alstrasoft:affiliate network pro (high 7.5)
- [CVE-2008-3239](https://insights.sbomify.com/CVE-2008-3239/): File upload in phpizabi:phpizabi (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/39/