# Vulnerabilities published in 2008


- [CVE-2008-2718](https://insights.sbomify.com/CVE-2008-2718/): Cross-site scripting in typo3:typo3 (medium 4.3)
- [CVE-2008-2717](https://insights.sbomify.com/CVE-2008-2717/): TYPO3 Unrestricted File Upload vulnerability (medium 6.5)
- [CVE-2008-2716](https://insights.sbomify.com/CVE-2008-2716/): Security feature bypass in opera:opera browser (medium 5.0)
- [CVE-2008-2715](https://insights.sbomify.com/CVE-2008-2715/): Information disclosure in opera:opera browser (medium 5.0)
- [CVE-2008-2714](https://insights.sbomify.com/CVE-2008-2714/): Other in opera:opera browser (medium 5.0)
- [CVE-2008-2713](https://insights.sbomify.com/CVE-2008-2713/): Memory corruption in clam anti-virus:clamav (medium 5.0)
- [CVE-2008-2712](https://insights.sbomify.com/CVE-2008-2712/): Command injection in canonical:ubuntu linux (critical 9.3)
- [CVE-2008-2711](https://insights.sbomify.com/CVE-2008-2711/): Denial of service in fetchmail:fetchmail (medium 4.3)
- [CVE-2008-2710](https://insights.sbomify.com/CVE-2008-2710/): Integer overflow in sun:opensolaris (high 7.2)
- [CVE-2008-2709](https://insights.sbomify.com/CVE-2008-2709/): Memory corruption in ibm:os 400 (medium 4.7)
- [CVE-2008-2708](https://insights.sbomify.com/CVE-2008-2708/): Denial of service in sun:opensolaris (medium 4.9)
- [CVE-2008-2707](https://insights.sbomify.com/CVE-2008-2707/): Denial of service in intel:network interface controller (high 7.8)
- [CVE-2008-2706](https://insights.sbomify.com/CVE-2008-2706/): Null dereference in sun:solaris (medium 4.9)
- [CVE-2008-2705](https://insights.sbomify.com/CVE-2008-2705/): Auth bypass in sun:java system access manager (critical 9.3)
- [CVE-2008-2704](https://insights.sbomify.com/CVE-2008-2704/): Denial of service in novell:groupwise messenger (medium 5.0)
- [CVE-2008-2703](https://insights.sbomify.com/CVE-2008-2703/): Memory corruption in novell:groupwise messenger (critical 10.0)
- [CVE-2008-2702](https://insights.sbomify.com/CVE-2008-2702/): Path traversal in estsoft:alftp (critical 9.3)
- [CVE-2008-2701](https://insights.sbomify.com/CVE-2008-2701/): SQL injection in joomla:com gameq (medium 6.8)
- [CVE-2008-2700](https://insights.sbomify.com/CVE-2008-2700/): SQL injection in gwm:galatolo webmanager (high 7.5)
- [CVE-2008-2699](https://insights.sbomify.com/CVE-2008-2699/): Path traversal in gwm:galatolo webmanager (high 7.5)
- [CVE-2008-2698](https://insights.sbomify.com/CVE-2008-2698/): Cross-site scripting in web-album:webalbum (medium 4.3)
- [CVE-2008-2697](https://insights.sbomify.com/CVE-2008-2697/): SQL injection in joomla:com rapidrecipe (high 7.5)
- [CVE-2008-2696](https://insights.sbomify.com/CVE-2008-2696/): Denial of service in exiv2:exiv2 (medium 4.3)
- [CVE-2008-2695](https://insights.sbomify.com/CVE-2008-2695/): Path traversal in phpinv:phpinv (high 7.5)
- [CVE-2008-2694](https://insights.sbomify.com/CVE-2008-2694/): Cross-site scripting in phpinv:phpinv (medium 4.3)
- [CVE-2008-2693](https://insights.sbomify.com/CVE-2008-2693/): Memory corruption in black ice:barcode sdk (critical 9.3)
- [CVE-2008-2692](https://insights.sbomify.com/CVE-2008-2692/): SQL injection in joomla:com yvcomment (high 7.5)
- [CVE-2008-2691](https://insights.sbomify.com/CVE-2008-2691/): SQL injection in jiro:faq manager experience (high 7.5)
- [CVE-2008-2690](https://insights.sbomify.com/CVE-2008-2690/): Code injection in browsercrm:browsercrm (critical 9.3)
- [CVE-2008-2689](https://insights.sbomify.com/CVE-2008-2689/): Code injection in browsercrm:browsercrm (critical 10.0)
- [CVE-2008-2688](https://insights.sbomify.com/CVE-2008-2688/): SQL injection in pilotcart:pilot cart (high 7.5)
- [CVE-2008-2687](https://insights.sbomify.com/CVE-2008-2687/): Path traversal in promanager:promanager (high 7.5)
- [CVE-2008-2686](https://insights.sbomify.com/CVE-2008-2686/): File upload in flux cms:flux cms (high 7.5)
- [CVE-2008-2685](https://insights.sbomify.com/CVE-2008-2685/): SQL injection in battleblog:battleblog (high 7.5)
- [CVE-2008-2684](https://insights.sbomify.com/CVE-2008-2684/): Memory corruption in blackice:black ice barcode sdk (critical 9.3)
- [CVE-2008-2683](https://insights.sbomify.com/CVE-2008-2683/): Other in black ice:barcode sdk (critical 9.3)
- [CVE-2008-2682](https://insights.sbomify.com/CVE-2008-2682/): Auth bypass in realm project:realm cms (high 7.5)
- [CVE-2008-2681](https://insights.sbomify.com/CVE-2008-2681/): Information disclosure in realm project:realm cms (medium 5.0)
- [CVE-2008-2680](https://insights.sbomify.com/CVE-2008-2680/): Cross-site scripting in realm project:realm cms (medium 4.3)
- [CVE-2008-2679](https://insights.sbomify.com/CVE-2008-2679/): SQL injection in realm project:realm cms (high 7.5)
- [CVE-2008-2678](https://insights.sbomify.com/CVE-2008-2678/): SQL injection in telephone:telephone directory 2008 (high 7.5)
- [CVE-2008-2677](https://insights.sbomify.com/CVE-2008-2677/): Cross-site scripting in telephone:telephone directory 2008 (medium 4.3)
- [CVE-2008-2676](https://insights.sbomify.com/CVE-2008-2676/): SQL injection in joomla:com news portal (high 7.5)
- [CVE-2008-2675](https://insights.sbomify.com/CVE-2008-2675/): Cross-site scripting in softcomplex:php image gallery (medium 4.3)
- [CVE-2008-2674](https://insights.sbomify.com/CVE-2008-2674/): Other in fujitsu:interstage application server enterprise (medium 6.4)
- [CVE-2008-2673](https://insights.sbomify.com/CVE-2008-2673/): SQL injection in powie:pnews (high 7.5)
- [CVE-2008-2672](https://insights.sbomify.com/CVE-2008-2672/): Path traversal in erfurtwiki:erfurtwiki (high 7.5)
- [CVE-2008-2671](https://insights.sbomify.com/CVE-2008-2671/): SQL injection in dcfm blog:dcfm blog (high 7.5)
- [CVE-2008-2670](https://insights.sbomify.com/CVE-2008-2670/): SQL injection in insanelysimple2:isblog (high 7.5)
- [CVE-2008-2669](https://insights.sbomify.com/CVE-2008-2669/): SQL injection in y-blog:yblog (high 7.5)
- [CVE-2008-2668](https://insights.sbomify.com/CVE-2008-2668/): Cross-site scripting in y-blog:yblog (medium 4.3)
- [CVE-2008-2667](https://insights.sbomify.com/CVE-2008-2667/): SQL injection in courier-mta:courtier-authlib (medium 5.1)
- [CVE-2008-2666](https://insights.sbomify.com/CVE-2008-2666/): Path traversal in php:php (medium 5.0)
- [CVE-2008-2665](https://insights.sbomify.com/CVE-2008-2665/): Path traversal in php:php (medium 5.0)
- [CVE-2008-2664](https://insights.sbomify.com/CVE-2008-2664/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2008-2663](https://insights.sbomify.com/CVE-2008-2663/): Integer overflow in canonical:ubuntu linux (critical 10.0)
- [CVE-2008-2662](https://insights.sbomify.com/CVE-2008-2662/): Integer overflow in canonical:ubuntu linux (critical 10.0)
- [CVE-2008-2654](https://insights.sbomify.com/CVE-2008-2654/): Memory corruption in lavrsen:motion (critical 10.0)
- [CVE-2008-2652](https://insights.sbomify.com/CVE-2008-2652/): SQL injection in smeweb:smeweb (high 7.5)
- [CVE-2008-2651](https://insights.sbomify.com/CVE-2008-2651/): SQL injection in joomla:com joobb (high 7.5)
- [CVE-2008-2650](https://insights.sbomify.com/CVE-2008-2650/): Path traversal in cmsimple:cmsimple (medium 6.8)
- [CVE-2008-2649](https://insights.sbomify.com/CVE-2008-2649/): Code injection in don3:desktoponnet (high 7.5)
- [CVE-2008-2648](https://insights.sbomify.com/CVE-2008-2648/): File upload in mebiblio:mebiblio (medium 6.8)
- [CVE-2008-2647](https://insights.sbomify.com/CVE-2008-2647/): SQL injection in mebiblio:mebiblio (high 7.5)
- [CVE-2008-2646](https://insights.sbomify.com/CVE-2008-2646/): Cross-site scripting in mebiblio:mebiblio (medium 4.3)
- [CVE-2008-2645](https://insights.sbomify.com/CVE-2008-2645/): Code injection in brim-project:brim (high 7.5)
- [CVE-2008-2644](https://insights.sbomify.com/CVE-2008-2644/): Cross-site scripting in smeweb:smeweb (medium 4.3)
- [CVE-2008-2643](https://insights.sbomify.com/CVE-2008-2643/): SQL injection in joomla:com biblestudy (high 7.5)
- [CVE-2008-2642](https://insights.sbomify.com/CVE-2008-2642/): SQL injection in kmrg-itb:otomigenx (high 7.5)
- [CVE-2008-2641](https://insights.sbomify.com/CVE-2008-2641/): Memory corruption in adobe:acrobat 3d (critical 10.0)
- [CVE-2008-2640](https://insights.sbomify.com/CVE-2008-2640/): Cross-site scripting in adobe:flex (medium 4.3)
- [CVE-2008-2639](https://insights.sbomify.com/CVE-2008-2639/): Memory corruption in citect:citectfacilities (high 7.6)
- [CVE-2008-2638](https://insights.sbomify.com/CVE-2008-2638/): Code injection in 1-script:1-book (critical 10.0)
- [CVE-2008-2637](https://insights.sbomify.com/CVE-2008-2637/): Cross-site scripting in f5:firepass ssl vpn (medium 4.3)
- [CVE-2008-2636](https://insights.sbomify.com/CVE-2008-2636/): Memory corruption in cisco:linksys wrh54g router (high 7.8)
- [CVE-2008-2635](https://insights.sbomify.com/CVE-2008-2635/): Path traversal in barad dur:bitkinex (critical 9.3)
- [CVE-2008-2634](https://insights.sbomify.com/CVE-2008-2634/): SQL injection in bearrivernet.net:i-pos internet pay online store (high 7.5)
- [CVE-2008-2633](https://insights.sbomify.com/CVE-2008-2633/): SQL injection in joomla:com joomradio (high 7.5)
- [CVE-2008-2632](https://insights.sbomify.com/CVE-2008-2632/): SQL injection in joomla:com acctexp (high 7.5)
- [CVE-2008-2631](https://insights.sbomify.com/CVE-2008-2631/): Null dereference in altn:mdaemon (medium 5.0)
- [CVE-2008-2630](https://insights.sbomify.com/CVE-2008-2630/): SQL injection in joomla:com jb2 (high 7.5)
- [CVE-2008-2629](https://insights.sbomify.com/CVE-2008-2629/): SQL injection in lifetype:lifetype (high 7.5)
- [CVE-2008-2628](https://insights.sbomify.com/CVE-2008-2628/): SQL injection in ron liskey:com equotes (high 7.5)
- [CVE-2008-2627](https://insights.sbomify.com/CVE-2008-2627/): SQL injection in joomla:com idoblog (high 7.5)
- [CVE-2008-2626](https://insights.sbomify.com/CVE-2008-2626/): SQL injection in battleblog:battleblog (high 7.5)
- [CVE-2008-2625](https://insights.sbomify.com/CVE-2008-2625/): Auth bypass in oracle:database 10g (medium 4.0)
- [CVE-2008-2624](https://insights.sbomify.com/CVE-2008-2624/): Other in oracle:database 10g (medium 6.5)
- [CVE-2008-2623](https://insights.sbomify.com/CVE-2008-2623/): Information disclosure in oracle:jdeveloper (low 2.1)
- [CVE-2008-2622](https://insights.sbomify.com/CVE-2008-2622/): Other in oracle:jd edwards enterpriseone (medium 6.5)
- [CVE-2008-2621](https://insights.sbomify.com/CVE-2008-2621/): Other in oracle:jd edwards enterpriseone (medium 4.0)
- [CVE-2008-2620](https://insights.sbomify.com/CVE-2008-2620/): Other in oracle:jd edwards enterpriseone (medium 6.5)
- [CVE-2008-2619](https://insights.sbomify.com/CVE-2008-2619/): Other in oracle:application server (low 1.7)
- [CVE-2008-2618](https://insights.sbomify.com/CVE-2008-2618/): Other in oracle:jd edwards enterpriseone (medium 6.5)
- [CVE-2008-2617](https://insights.sbomify.com/CVE-2008-2617/): Other in oracle:jd edwards enterpriseone (medium 6.5)
- [CVE-2008-2616](https://insights.sbomify.com/CVE-2008-2616/): Other in oracle:jd edwards enterpriseone (medium 6.5)
- [CVE-2008-2615](https://insights.sbomify.com/CVE-2008-2615/): Other in oracle:jd edwards enterpriseone (medium 6.5)
- [CVE-2008-2614](https://insights.sbomify.com/CVE-2008-2614/): Other in oracle:application server (medium 4.3)
- [CVE-2008-2613](https://insights.sbomify.com/CVE-2008-2613/): Privilege escalation in oracle:database scheduler (medium 6.5)
- [CVE-2008-2612](https://insights.sbomify.com/CVE-2008-2612/): Other in oracle:hyperion bi plus component (medium 4.3)
- [CVE-2008-2611](https://insights.sbomify.com/CVE-2008-2611/): Other in oracle:core rdbms component (medium 4.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/45/