# Vulnerabilities published in 2008


- [CVE-2008-3238](https://insights.sbomify.com/CVE-2008-3238/): SQL injection in itechscripts:itechbids (high 7.5)
- [CVE-2008-3237](https://insights.sbomify.com/CVE-2008-3237/): Cross-site scripting in itechscripts:itechbids (medium 4.3)
- [CVE-2008-3236](https://insights.sbomify.com/CVE-2008-3236/): Information disclosure in ibm:websphere application server (medium 5.0)
- [CVE-2008-3235](https://insights.sbomify.com/CVE-2008-3235/): Other in ibm:websphere application server (critical 10.0)
- [CVE-2008-3234](https://insights.sbomify.com/CVE-2008-3234/): Privilege escalation in openbsd:openssh (medium 6.5)
- [CVE-2008-3233](https://insights.sbomify.com/CVE-2008-3233/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2008-3232](https://insights.sbomify.com/CVE-2008-3232/): File upload in dotclear:dotclear (critical 9.3)
- [CVE-2008-3231](https://insights.sbomify.com/CVE-2008-3231/): Denial of service in xine:xine-lib (medium 4.3)
- [CVE-2008-3230](https://insights.sbomify.com/CVE-2008-3230/): Denial of service in ffmpeg:lavf demuxer (low 1.9)
- [CVE-2008-3229](https://insights.sbomify.com/CVE-2008-3229/): Memory corruption in swapoff:op (medium 6.9)
- [CVE-2008-3228](https://insights.sbomify.com/CVE-2008-3228/): Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs (high 7.5)
- [CVE-2008-3227](https://insights.sbomify.com/CVE-2008-3227/): Joomla! Open Redirect vulnerability (high 7.5)
- [CVE-2008-3226](https://insights.sbomify.com/CVE-2008-3226/): Joomla! allows attackers to access cached pages (medium 5.0)
- [CVE-2008-3225](https://insights.sbomify.com/CVE-2008-3225/): Auth bypass in joomla:joomla (critical 10.0)
- [CVE-2008-3224](https://insights.sbomify.com/CVE-2008-3224/): Other in phpbb:phpbb (critical 10.0)
- [CVE-2008-3223](https://insights.sbomify.com/CVE-2008-3223/): SQL injection in drupal:drupal (high 7.5)
- [CVE-2008-3222](https://insights.sbomify.com/CVE-2008-3222/): Auth bypass in drupal:drupal (medium 5.8)
- [CVE-2008-3221](https://insights.sbomify.com/CVE-2008-3221/): Cross-site request forgery in drupal:drupal (medium 4.3)
- [CVE-2008-3220](https://insights.sbomify.com/CVE-2008-3220/): Cross-site request forgery in drupal:drupal (medium 4.3)
- [CVE-2008-3219](https://insights.sbomify.com/CVE-2008-3219/): Cross-site scripting in drupal:drupal (medium 4.3)
- [CVE-2008-3218](https://insights.sbomify.com/CVE-2008-3218/): Drupal vulnerable to Cross-site Scripting (medium 4.3)
- [CVE-2008-3217](https://insights.sbomify.com/CVE-2008-3217/): Weak cryptography in powerdns:recursor (medium 6.8)
- [CVE-2008-3216](https://insights.sbomify.com/CVE-2008-3216/): Other in debian:projectl (medium 4.6)
- [CVE-2008-3215](https://insights.sbomify.com/CVE-2008-3215/): Memory corruption in clam anti-virus:clamav (medium 5.0)
- [CVE-2008-3214](https://insights.sbomify.com/CVE-2008-3214/): Denial of service in thekelleys:dnsmasq (high 7.8)
- [CVE-2008-3213](https://insights.sbomify.com/CVE-2008-3213/): SQL injection in webcms:webcms portal edition (high 7.5)
- [CVE-2008-3212](https://insights.sbomify.com/CVE-2008-3212/): SQL injection in scripteen:free image hosting script (high 7.5)
- [CVE-2008-3211](https://insights.sbomify.com/CVE-2008-3211/): Auth bypass in scripteen:free image hosting script (high 7.5)
- [CVE-2008-3210](https://insights.sbomify.com/CVE-2008-3210/): Denial of service in resiprocate:resiprocate (medium 5.0)
- [CVE-2008-3209](https://insights.sbomify.com/CVE-2008-3209/): Memory corruption in blackice:black ice document imaging sdk (critical 9.3)
- [CVE-2008-3208](https://insights.sbomify.com/CVE-2008-3208/): Denial of service in simpledns:simple dns plus (medium 5.0)
- [CVE-2008-3207](https://insights.sbomify.com/CVE-2008-3207/): Code injection in pragyan:praygan cms (critical 9.3)
- [CVE-2008-3206](https://insights.sbomify.com/CVE-2008-3206/): SQL injection in iamilkay:yuhhu pubs black cat (high 7.5)
- [CVE-2008-3205](https://insights.sbomify.com/CVE-2008-3205/): Path traversal in easy-script:wysi wiki wyg (medium 5.0)
- [CVE-2008-3204](https://insights.sbomify.com/CVE-2008-3204/): SQL injection in e-topbiz:million pixels (high 7.5)
- [CVE-2008-3203](https://insights.sbomify.com/CVE-2008-3203/): Missing authorization in auracms:auracms (high 7.5)
- [CVE-2008-3202](https://insights.sbomify.com/CVE-2008-3202/): Cross-site scripting in xomol:xomol cms (medium 4.3)
- [CVE-2008-3201](https://insights.sbomify.com/CVE-2008-3201/): Cross-site scripting in pagefusion:pagefusion (medium 4.3)
- [CVE-2008-3200](https://insights.sbomify.com/CVE-2008-3200/): SQL injection in easy-script:avlc forum (high 7.5)
- [CVE-2008-3199](https://insights.sbomify.com/CVE-2008-3199/): Denial of service in resiprocate:resiprocate (high 7.8)
- [CVE-2008-3198](https://insights.sbomify.com/CVE-2008-3198/): Code injection in mozilla:firefox (high 7.5)
- [CVE-2008-3197](https://insights.sbomify.com/CVE-2008-3197/): Cross-site request forgery in phpmyadmin:phpmyadmin (low 3.5)
- [CVE-2008-3196](https://insights.sbomify.com/CVE-2008-3196/): Memory corruption in yacc:yacc (high 7.8)
- [CVE-2008-3195](https://insights.sbomify.com/CVE-2008-3195/): Path traversal in twiki:twiki (medium 6.8)
- [CVE-2008-3194](https://insights.sbomify.com/CVE-2008-3194/): Path traversal in pluck:pluck (medium 6.8)
- [CVE-2008-3193](https://insights.sbomify.com/CVE-2008-3193/): SQL injection in sclek:jsite (high 7.5)
- [CVE-2008-3192](https://insights.sbomify.com/CVE-2008-3192/): Path traversal in sclek:jsite (medium 6.8)
- [CVE-2008-3191](https://insights.sbomify.com/CVE-2008-3191/): SQL injection in marcioforum:mforum (medium 6.8)
- [CVE-2008-3190](https://insights.sbomify.com/CVE-2008-3190/): Path traversal in 1scripts:codedb (medium 6.8)
- [CVE-2008-3189](https://insights.sbomify.com/CVE-2008-3189/): SQL injection in dreamlevels:dreamnews manager (high 7.5)
- [CVE-2008-3188](https://insights.sbomify.com/CVE-2008-3188/): Weak cryptography in opensuse:opensuse (high 7.5)
- [CVE-2008-3187](https://insights.sbomify.com/CVE-2008-3187/): Security feature bypass in opensuse:zypper (medium 5.0)
- [CVE-2008-3186](https://insights.sbomify.com/CVE-2008-3186/): Cross-site scripting in chipmunk scripts:chipmunk blogger (medium 4.3)
- [CVE-2008-3185](https://insights.sbomify.com/CVE-2008-3185/): SQL injection in vclcomponents:relative real estate systems (medium 6.8)
- [CVE-2008-3184](https://insights.sbomify.com/CVE-2008-3184/): Cross-site scripting in vbulletin:vbulletin (medium 4.3)
- [CVE-2008-3183](https://insights.sbomify.com/CVE-2008-3183/): Code injection in gapi cms:gapicms (high 7.5)
- [CVE-2008-3182](https://insights.sbomify.com/CVE-2008-3182/): Memory corruption in speedbit:download accelerator plus (critical 9.3)
- [CVE-2008-3181](https://insights.sbomify.com/CVE-2008-3181/): File upload in content now:content now (medium 6.5)
- [CVE-2008-3180](https://insights.sbomify.com/CVE-2008-3180/): Cross-site scripting in cwh underground:contentnow cms (medium 4.3)
- [CVE-2008-3179](https://insights.sbomify.com/CVE-2008-3179/): Path traversal in w2b:phpdatingclub (high 7.5)
- [CVE-2008-3178](https://insights.sbomify.com/CVE-2008-3178/): File upload in webxell:webxell editor (high 7.5)
- [CVE-2008-3177](https://insights.sbomify.com/CVE-2008-3177/): Denial of service in sophos:es1000 (medium 5.0)
- [CVE-2008-3175](https://insights.sbomify.com/CVE-2008-3175/): Integer overflow in broadcom:brightstor arcserve backup (critical 10.0)
- [CVE-2008-3174](https://insights.sbomify.com/CVE-2008-3174/): Denial of service in computer associates:host based intrusion prevention system (medium 5.0)
- [CVE-2008-3173](https://insights.sbomify.com/CVE-2008-3173/): Security feature bypass in microsoft:internet explorer (medium 6.8)
- [CVE-2008-3172](https://insights.sbomify.com/CVE-2008-3172/): Security feature bypass in opera:opera (medium 6.8)
- [CVE-2008-3171](https://insights.sbomify.com/CVE-2008-3171/): Information disclosure in apple:safari (medium 5.0)
- [CVE-2008-3170](https://insights.sbomify.com/CVE-2008-3170/): Security feature bypass in apple:safari (medium 6.8)
- [CVE-2008-3169](https://insights.sbomify.com/CVE-2008-3169/): Memory corruption in empire server:empire server (critical 10.0)
- [CVE-2008-3168](https://insights.sbomify.com/CVE-2008-3168/): Information disclosure in empire server:empire server (medium 5.0)
- [CVE-2008-3167](https://insights.sbomify.com/CVE-2008-3167/): Code injection in boonex:dolphin (critical 9.3)
- [CVE-2008-3166](https://insights.sbomify.com/CVE-2008-3166/): Code injection in boonex:ray (critical 9.3)
- [CVE-2008-3165](https://insights.sbomify.com/CVE-2008-3165/): Path traversal in fuzzylime:fuzzylime cms (medium 6.8)
- [CVE-2008-3164](https://insights.sbomify.com/CVE-2008-3164/): Path traversal in fuzzylime:fuzzylime cms (high 7.6)
- [CVE-2008-3163](https://insights.sbomify.com/CVE-2008-3163/): Path traversal in regretless:dodos mail (medium 6.8)
- [CVE-2008-3162](https://insights.sbomify.com/CVE-2008-3162/): Memory corruption in ffmpeg:ffmpeg (critical 9.3)
- [CVE-2008-3161](https://insights.sbomify.com/CVE-2008-3161/): Cross-site scripting in ibm:maximo (medium 4.3)
- [CVE-2008-3160](https://insights.sbomify.com/CVE-2008-3160/): Other in ibm:data ontap (critical 10.0)
- [CVE-2008-3159](https://insights.sbomify.com/CVE-2008-3159/): Integer overflow in novell:edirectory (critical 10.0)
- [CVE-2008-3158](https://insights.sbomify.com/CVE-2008-3158/): Memory corruption in novell:novell client for windows (medium 6.9)
- [CVE-2008-3157](https://insights.sbomify.com/CVE-2008-3157/): Denial of service in nortel:sip multimedia pc client (medium 5.0)
- [CVE-2008-3156](https://insights.sbomify.com/CVE-2008-3156/): Code injection in panda:panda activescan (critical 9.3)
- [CVE-2008-3155](https://insights.sbomify.com/CVE-2008-3155/): Memory corruption in panda:panda activescan (critical 9.3)
- [CVE-2008-3154](https://insights.sbomify.com/CVE-2008-3154/): SQL injection in webblizzard:content management system (high 7.5)
- [CVE-2008-3153](https://insights.sbomify.com/CVE-2008-3153/): SQL injection in tritoncms:triton cms pro (high 7.5)
- [CVE-2008-3152](https://insights.sbomify.com/CVE-2008-3152/): SQL injection in orbitscripts:smartppc (high 7.5)
- [CVE-2008-3151](https://insights.sbomify.com/CVE-2008-3151/): SQL injection in phpnuke:4ndvddb (high 7.5)
- [CVE-2008-3150](https://insights.sbomify.com/CVE-2008-3150/): Path traversal in neutrino-cms:atomic edition (critical 10.0)
- [CVE-2008-3149](https://insights.sbomify.com/CVE-2008-3149/): Denial of service in f5:firepass 1200 (high 7.8)
- [CVE-2008-3148](https://insights.sbomify.com/CVE-2008-3148/): Memory corruption in mackt:imprec (medium 6.8)
- [CVE-2008-3147](https://insights.sbomify.com/CVE-2008-3147/): Information disclosure in wefi:wefi (medium 4.7)
- [CVE-2008-3146](https://insights.sbomify.com/CVE-2008-3146/): Memory corruption in wireshark:wireshark (critical 10.0)
- [CVE-2008-3145](https://insights.sbomify.com/CVE-2008-3145/): Memory corruption in wireshark:wireshark (medium 5.0)
- [CVE-2008-3144](https://insights.sbomify.com/CVE-2008-3144/): Integer overflow in python:python (medium 5.0)
- [CVE-2008-3143](https://insights.sbomify.com/CVE-2008-3143/): Integer overflow in python:python (high 7.5)
- [CVE-2008-3142](https://insights.sbomify.com/CVE-2008-3142/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2008-3141](https://insights.sbomify.com/CVE-2008-3141/): Information disclosure in wireshark:wireshark (medium 4.9)
- [CVE-2008-3140](https://insights.sbomify.com/CVE-2008-3140/): Denial of service in wireshark:wireshark (medium 5.0)
- [CVE-2008-3139](https://insights.sbomify.com/CVE-2008-3139/): Denial of service in rpath:rpath linux (medium 5.0)
- [CVE-2008-3138](https://insights.sbomify.com/CVE-2008-3138/): Denial of service in rpath:rpath linux (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/40/