# Vulnerabilities published in 2008


- [CVE-2008-3030](https://insights.sbomify.com/CVE-2008-3030/): SQL injection in efes tech shop:efes tech shop (high 7.5)
- [CVE-2008-3029](https://insights.sbomify.com/CVE-2008-3029/): Cross-site scripting in typo3:wec discussion forum (medium 4.3)
- [CVE-2008-3028](https://insights.sbomify.com/CVE-2008-3028/): Cross-site scripting in typo3:send a card (medium 4.3)
- [CVE-2008-3027](https://insights.sbomify.com/CVE-2008-3027/): SQL injection in vangogh web cms:vangogh web cms (high 7.5)
- [CVE-2008-3026](https://insights.sbomify.com/CVE-2008-3026/): SQL injection in oneclick cms:oneclick cms (high 7.5)
- [CVE-2008-3025](https://insights.sbomify.com/CVE-2008-3025/): SQL injection in plx web studio:plx ad trader (high 7.5)
- [CVE-2008-3024](https://insights.sbomify.com/CVE-2008-3024/): Memory corruption in blackberry:qnx momentics (critical 9.3)
- [CVE-2008-3023](https://insights.sbomify.com/CVE-2008-3023/): Cross-site scripting in fswiki:freestyle wiki (medium 4.3)
- [CVE-2008-3022](https://insights.sbomify.com/CVE-2008-3022/): Code injection in phpbbportal:phportal (high 7.5)
- [CVE-2008-3021](https://insights.sbomify.com/CVE-2008-3021/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2008-3020](https://insights.sbomify.com/CVE-2008-3020/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2008-3019](https://insights.sbomify.com/CVE-2008-3019/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2008-3018](https://insights.sbomify.com/CVE-2008-3018/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2008-3015](https://insights.sbomify.com/CVE-2008-3015/): Integer overflow in microsoft:digital image suite (critical 9.3)
- [CVE-2008-3014](https://insights.sbomify.com/CVE-2008-3014/): Memory corruption in microsoft:digital image suite (critical 9.3)
- [CVE-2008-3013](https://insights.sbomify.com/CVE-2008-3013/): Memory corruption in microsoft:digital image suite (critical 9.3)
- [CVE-2008-3012](https://insights.sbomify.com/CVE-2008-3012/): Memory corruption in microsoft:digital image suite (critical 9.3)
- [CVE-2008-3010](https://insights.sbomify.com/CVE-2008-3010/): Information disclosure in microsoft:windows media player (critical 10.0)
- [CVE-2008-3009](https://insights.sbomify.com/CVE-2008-3009/): Auth bypass in microsoft:windows media format runtime (critical 10.0)
- [CVE-2008-3008](https://insights.sbomify.com/CVE-2008-3008/): Memory corruption in microsoft:windows-nt (critical 9.3)
- [CVE-2008-3007](https://insights.sbomify.com/CVE-2008-3007/): Command injection in microsoft:office (critical 9.3)
- [CVE-2008-3006](https://insights.sbomify.com/CVE-2008-3006/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2008-3005](https://insights.sbomify.com/CVE-2008-3005/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2008-3004](https://insights.sbomify.com/CVE-2008-3004/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2008-3003](https://insights.sbomify.com/CVE-2008-3003/): Information disclosure in microsoft:office (medium 6.6)
- [CVE-2008-3001](https://insights.sbomify.com/CVE-2008-3001/): File upload in drupal:aggregation module (critical 9.3)
- [CVE-2008-3000](https://insights.sbomify.com/CVE-2008-3000/): Missing authorization in drupal:aggregation module (medium 6.8)
- [CVE-2008-2999](https://insights.sbomify.com/CVE-2008-2999/): SQL injection in drupal:aggregation module (high 7.5)
- [CVE-2008-2998](https://insights.sbomify.com/CVE-2008-2998/): Cross-site scripting in drupal:aggregation module (medium 4.3)
- [CVE-2008-2997](https://insights.sbomify.com/CVE-2008-2997/): Cross-site scripting in gravityboardx:gravity board x (medium 4.3)
- [CVE-2008-2996](https://insights.sbomify.com/CVE-2008-2996/): SQL injection in gravityboardx:gravity board x (medium 6.8)
- [CVE-2008-2995](https://insights.sbomify.com/CVE-2008-2995/): SQL injection in phpeasydata:phpeasydata (high 7.5)
- [CVE-2008-2994](https://insights.sbomify.com/CVE-2008-2994/): Cross-site scripting in phpeasydata:phpeasydata (medium 4.3)
- [CVE-2008-2993](https://insights.sbomify.com/CVE-2008-2993/): Path traversal in fog:fog forum (high 7.5)
- [CVE-2008-2992](https://insights.sbomify.com/CVE-2008-2992/): Adobe Reader and Acrobat Input Validation (high 7.8, exploited in the wild)
- [CVE-2008-2991](https://insights.sbomify.com/CVE-2008-2991/): Cross-site scripting in adobe:robohelp server (medium 6.1)
- [CVE-2008-2990](https://insights.sbomify.com/CVE-2008-2990/): Code injection in joomla:com facileforms (high 7.5)
- [CVE-2008-2989](https://insights.sbomify.com/CVE-2008-2989/): SQL injection in homap:homap (high 7.5)
- [CVE-2008-2988](https://insights.sbomify.com/CVE-2008-2988/): File upload in benjacms:benja cms (high 7.5)
- [CVE-2008-2987](https://insights.sbomify.com/CVE-2008-2987/): Cross-site scripting in benjacms:benja cms (medium 4.3)
- [CVE-2008-2986](https://insights.sbomify.com/CVE-2008-2986/): Code injection in phpdmca:phpdmca (high 7.5)
- [CVE-2008-2985](https://insights.sbomify.com/CVE-2008-2985/): Path traversal in cmreams:cmreams cms (medium 6.8)
- [CVE-2008-2984](https://insights.sbomify.com/CVE-2008-2984/): Cross-site scripting in cmreams:cmreams cms (medium 4.3)
- [CVE-2008-2983](https://insights.sbomify.com/CVE-2008-2983/): SQL injection in cwh underground:demo4 cms (high 7.5)
- [CVE-2008-2982](https://insights.sbomify.com/CVE-2008-2982/): Path traversal in homeph design:homeph design (medium 6.8)
- [CVE-2008-2981](https://insights.sbomify.com/CVE-2008-2981/): Code injection in homeph design:homeph design (medium 6.8)
- [CVE-2008-2980](https://insights.sbomify.com/CVE-2008-2980/): Cross-site scripting in homeph design:homeph design (medium 4.3)
- [CVE-2008-2979](https://insights.sbomify.com/CVE-2008-2979/): Cross-site scripting in ourvideo cms:ourvideo cms (medium 4.3)
- [CVE-2008-2978](https://insights.sbomify.com/CVE-2008-2978/): Path traversal in ourvideocms:ourvideo cms (medium 6.8)
- [CVE-2008-2977](https://insights.sbomify.com/CVE-2008-2977/): Code injection in ourvideo cms:ourvideo cms (high 7.5)
- [CVE-2008-2976](https://insights.sbomify.com/CVE-2008-2976/): Path traversal in tinx cms:tinx cms (medium 6.8)
- [CVE-2008-2975](https://insights.sbomify.com/CVE-2008-2975/): Cross-site scripting in tinx cms:tinx cms (medium 4.3)
- [CVE-2008-2974](https://insights.sbomify.com/CVE-2008-2974/): Path traversal in mm chat:mm chat (medium 6.8)
- [CVE-2008-2973](https://insights.sbomify.com/CVE-2008-2973/): Cross-site scripting in mm chat:mm chat (medium 4.3)
- [CVE-2008-2972](https://insights.sbomify.com/CVE-2008-2972/): SQL injection in kblance:kblance (high 7.5)
- [CVE-2008-2971](https://insights.sbomify.com/CVE-2008-2971/): SQL injection in cistyle:ciblog (high 7.5)
- [CVE-2008-2970](https://insights.sbomify.com/CVE-2008-2970/): Auth bypass in yektaweb:academic web tools (high 7.5)
- [CVE-2008-2969](https://insights.sbomify.com/CVE-2008-2969/): Path traversal in yektaweb:academic web tools (medium 5.0)
- [CVE-2008-2968](https://insights.sbomify.com/CVE-2008-2968/): SQL injection in yektaweb:academic web tools (high 7.5)
- [CVE-2008-2967](https://insights.sbomify.com/CVE-2008-2967/): Cross-site scripting in yektaweb:academic web tools (medium 4.3)
- [CVE-2008-2966](https://insights.sbomify.com/CVE-2008-2966/): Path traversal in jaxultrabb:jaxultrabb (high 7.5)
- [CVE-2008-2965](https://insights.sbomify.com/CVE-2008-2965/): Cross-site scripting in jaxbot:jaxultrabb (medium 4.3)
- [CVE-2008-2964](https://insights.sbomify.com/CVE-2008-2964/): SQL injection in researchguide:researchguide (high 7.5)
- [CVE-2008-2963](https://insights.sbomify.com/CVE-2008-2963/): SQL injection in myblog:myblog (medium 6.8)
- [CVE-2008-2962](https://insights.sbomify.com/CVE-2008-2962/): Cross-site scripting in myblog:myblog (medium 4.3)
- [CVE-2008-2961](https://insights.sbomify.com/CVE-2008-2961/): Path traversal in cmsmini:cms mini (medium 5.0)
- [CVE-2008-2960](https://insights.sbomify.com/CVE-2008-2960/): Cross-site scripting in phpmyadmin:phpmyadmin (low 2.6)
- [CVE-2008-2959](https://insights.sbomify.com/CVE-2008-2959/): Memory corruption in microsoft:visual basic enterprise edition (critical 9.3)
- [CVE-2008-2958](https://insights.sbomify.com/CVE-2008-2958/): Race condition in checkinstall:checkinstall (medium 4.4)
- [CVE-2008-2957](https://insights.sbomify.com/CVE-2008-2957/): Denial of service in pidgin:pidgin (medium 6.4)
- [CVE-2008-2956](https://insights.sbomify.com/CVE-2008-2956/): Denial of service in pidgin:pidgin (medium 5.0)
- [CVE-2008-2955](https://insights.sbomify.com/CVE-2008-2955/): Denial of service in pidgin:pidgin (medium 4.3)
- [CVE-2008-2954](https://insights.sbomify.com/CVE-2008-2954/): Memory corruption in linux:direct connect (high 7.8)
- [CVE-2008-2953](https://insights.sbomify.com/CVE-2008-2953/): Null dereference in linux:direct connect (medium 5.0)
- [CVE-2008-2952](https://insights.sbomify.com/CVE-2008-2952/): Denial of service in openldap:openldap (medium 5.0)
- [CVE-2008-2951](https://insights.sbomify.com/CVE-2008-2951/): Trac Open Redirect vulnerability (medium 6.1)
- [CVE-2008-2950](https://insights.sbomify.com/CVE-2008-2950/): Memory corruption in poppler:poppler (high 7.5)
- [CVE-2008-2949](https://insights.sbomify.com/CVE-2008-2949/): Security feature bypass in microsoft:internet explorer (medium 6.8)
- [CVE-2008-2948](https://insights.sbomify.com/CVE-2008-2948/): Security feature bypass in microsoft:internet explorer (medium 6.8)
- [CVE-2008-2947](https://insights.sbomify.com/CVE-2008-2947/): Security feature bypass in microsoft:internet explorer (medium 6.8)
- [CVE-2008-2946](https://insights.sbomify.com/CVE-2008-2946/): Denial of service in sun:solaris (high 7.8)
- [CVE-2008-2945](https://insights.sbomify.com/CVE-2008-2945/): Code injection in sun:java system access manager (high 7.5)
- [CVE-2008-2944](https://insights.sbomify.com/CVE-2008-2944/): Memory corruption in fedoraproject:fedora core (medium 4.9)
- [CVE-2008-2943](https://insights.sbomify.com/CVE-2008-2943/): Memory corruption in ibm:tivoli directory server (medium 6.0)
- [CVE-2008-2942](https://insights.sbomify.com/CVE-2008-2942/): Mercurial Directory traversal vulnerability (medium 6.8)
- [CVE-2008-2941](https://insights.sbomify.com/CVE-2008-2941/): Denial of service in hp:linux imaging and printing project (medium 4.9)
- [CVE-2008-2940](https://insights.sbomify.com/CVE-2008-2940/): Privilege escalation in hp:linux imaging and printing project (high 7.2)
- [CVE-2008-2939](https://insights.sbomify.com/CVE-2008-2939/): Cross-site scripting in apache:http server (medium 4.3)
- [CVE-2008-2938](https://insights.sbomify.com/CVE-2008-2938/): Apache Tomcat Directory Traversal vulnerability (medium 4.3)
- [CVE-2008-2937](https://insights.sbomify.com/CVE-2008-2937/): Information disclosure in postfix:postfix (low 1.9)
- [CVE-2008-2936](https://insights.sbomify.com/CVE-2008-2936/): Privilege escalation in postfix:postfix (medium 6.2)
- [CVE-2008-2935](https://insights.sbomify.com/CVE-2008-2935/): Memory corruption in xmlsoft:libxslt (high 7.5)
- [CVE-2008-2934](https://insights.sbomify.com/CVE-2008-2934/): Memory corruption in apple:mac os x (high 8.8)
- [CVE-2008-2933](https://insights.sbomify.com/CVE-2008-2933/): Security feature bypass in mozilla:firefox (low 2.6)
- [CVE-2008-2932](https://insights.sbomify.com/CVE-2008-2932/): Memory corruption in redhat:adminutil (high 7.5)
- [CVE-2008-2931](https://insights.sbomify.com/CVE-2008-2931/): Privilege escalation in canonical:ubuntu linux (high 7.8)
- [CVE-2008-2930](https://insights.sbomify.com/CVE-2008-2930/): Denial of service in fedora:directory server (high 7.1)
- [CVE-2008-2929](https://insights.sbomify.com/CVE-2008-2929/): Cross-site scripting in fedora:directory server (medium 4.3)
- [CVE-2008-2928](https://insights.sbomify.com/CVE-2008-2928/): Memory corruption in redhat:directory server (critical 10.0)
- [CVE-2008-2927](https://insights.sbomify.com/CVE-2008-2927/): Integer overflow in adium:adium (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/42/