# Vulnerabilities published in 2008


- [CVE-2008-2508](https://insights.sbomify.com/CVE-2008-2508/): Cross-site scripting in tr script news:tr script news (medium 4.3)
- [CVE-2008-2507](https://insights.sbomify.com/CVE-2008-2507/): Cross-site scripting in brown bear software:calcium (medium 4.3)
- [CVE-2008-2506](https://insights.sbomify.com/CVE-2008-2506/): SQL injection in simpel side:weblosning (high 7.5)
- [CVE-2008-2505](https://insights.sbomify.com/CVE-2008-2505/): Cross-site scripting in simpel side:weblosninger (medium 4.3)
- [CVE-2008-2504](https://insights.sbomify.com/CVE-2008-2504/): SQL injection in simpel side:netbutik (high 7.5)
- [CVE-2008-2503](https://insights.sbomify.com/CVE-2008-2503/): Memory corruption in sourceforge:emule x-ray (critical 9.3)
- [CVE-2008-2502](https://insights.sbomify.com/CVE-2008-2502/): Memory corruption in emule:x ray (high 7.5)
- [CVE-2008-2501](https://insights.sbomify.com/CVE-2008-2501/): SQL injection in henning stoverud:phphotoalbum (high 7.5)
- [CVE-2008-2500](https://insights.sbomify.com/CVE-2008-2500/): Cross-site scripting in mambo:mostlyce (medium 4.3)
- [CVE-2008-2499](https://insights.sbomify.com/CVE-2008-2499/): Memory corruption in ibm:lotus sametime (high 7.5)
- [CVE-2008-2498](https://insights.sbomify.com/CVE-2008-2498/): SQL injection in mambo-foundation:mambo (high 7.5)
- [CVE-2008-2497](https://insights.sbomify.com/CVE-2008-2497/): Other in mambo-foundation:mambo (medium 5.0)
- [CVE-2008-2496](https://insights.sbomify.com/CVE-2008-2496/): Cross-site scripting in quate:quate cms (medium 4.3)
- [CVE-2008-2495](https://insights.sbomify.com/CVE-2008-2495/): Path traversal in pancake:zina (high 7.5)
- [CVE-2008-2494](https://insights.sbomify.com/CVE-2008-2494/): Cross-site scripting in pancake:zina (medium 4.3)
- [CVE-2008-2493](https://insights.sbomify.com/CVE-2008-2493/): Cross-site scripting in badongo:campus bulletin board (medium 4.3)
- [CVE-2008-2492](https://insights.sbomify.com/CVE-2008-2492/): SQL injection in badongo:campus bulletin board (high 7.5)
- [CVE-2008-2491](https://insights.sbomify.com/CVE-2008-2491/): SQL injection in hotscripts:ablespace (high 7.5)
- [CVE-2008-2490](https://insights.sbomify.com/CVE-2008-2490/): Cross-site scripting in typo3:kj imagelightbox2 (medium 4.3)
- [CVE-2008-2489](https://insights.sbomify.com/CVE-2008-2489/): SQL injection in typo3:sg zfelib (high 7.5)
- [CVE-2008-2488](https://insights.sbomify.com/CVE-2008-2488/): Missing authorization in beaussier:roomphplanning (medium 6.5)
- [CVE-2008-2487](https://insights.sbomify.com/CVE-2008-2487/): SQL injection in maxsite:maxsite (high 7.5)
- [CVE-2008-2486](https://insights.sbomify.com/CVE-2008-2486/): Other in emule:emule plus (critical 10.0)
- [CVE-2008-2485](https://insights.sbomify.com/CVE-2008-2485/): Cross-site scripting in pcpin:pcpin chat (medium 4.3)
- [CVE-2008-2484](https://insights.sbomify.com/CVE-2008-2484/): SQL injection in xomol:xomol cms (medium 6.8)
- [CVE-2008-2483](https://insights.sbomify.com/CVE-2008-2483/): Path traversal in xomol:xomol cms (medium 6.8)
- [CVE-2008-2482](https://insights.sbomify.com/CVE-2008-2482/): Path traversal in insanevisions:onecms (high 7.5)
- [CVE-2008-2481](https://insights.sbomify.com/CVE-2008-2481/): Code injection in phpraider:phpraider (critical 10.0)
- [CVE-2008-2480](https://insights.sbomify.com/CVE-2008-2480/): Code injection in plusphp:plusphp short url multi-user script (critical 10.0)
- [CVE-2008-2479](https://insights.sbomify.com/CVE-2008-2479/): SQL injection in badongo:phpfix (medium 6.8)
- [CVE-2008-2478](https://insights.sbomify.com/CVE-2008-2478/): Command injection in cpanel:cpanel (high 8.5)
- [CVE-2008-2477](https://insights.sbomify.com/CVE-2008-2477/): SQL injection in mx-system:mxbb portal (high 7.5)
- [CVE-2008-2476](https://insights.sbomify.com/CVE-2008-2476/): Security feature bypass in force10:ftos (critical 9.3)
- [CVE-2008-2475](https://insights.sbomify.com/CVE-2008-2475/): Command injection in ebay:enhanced picture uploader activex control (critical 9.3)
- [CVE-2008-2474](https://insights.sbomify.com/CVE-2008-2474/): Memory corruption in abb:pcu400 (critical 10.0)
- [CVE-2008-2470](https://insights.sbomify.com/CVE-2008-2470/): Memory corruption in macrovision:flexnet connect (critical 9.3)
- [CVE-2008-2469](https://insights.sbomify.com/CVE-2008-2469/): Memory corruption in libspf:libspf2 (critical 10.0)
- [CVE-2008-2468](https://insights.sbomify.com/CVE-2008-2468/): Memory corruption in landesk:landesk management suite (critical 10.0)
- [CVE-2008-2464](https://insights.sbomify.com/CVE-2008-2464/): Denial of service in freebsd:freebsd (high 7.1)
- [CVE-2008-2463](https://insights.sbomify.com/CVE-2008-2463/): Code injection in microsoft:office snapshot viewer activex (medium 6.8)
- [CVE-2008-2462](https://insights.sbomify.com/CVE-2008-2462/): Cross-site scripting in caucho:resin (medium 4.3)
- [CVE-2008-2461](https://insights.sbomify.com/CVE-2008-2461/): SQL injection in netious:netious cms (high 7.5)
- [CVE-2008-2460](https://insights.sbomify.com/CVE-2008-2460/): SQL injection in vbulletin:vbulletin (high 7.5)
- [CVE-2008-2459](https://insights.sbomify.com/CVE-2008-2459/): Path traversal in entertainmentscript:entertainmentscript (medium 6.8)
- [CVE-2008-2458](https://insights.sbomify.com/CVE-2008-2458/): Cross-site scripting in 4shared:starsgames control panel (medium 4.3)
- [CVE-2008-2457](https://insights.sbomify.com/CVE-2008-2457/): SQL injection in bitmixsoft:php-jokesite (high 7.5)
- [CVE-2008-2456](https://insights.sbomify.com/CVE-2008-2456/): SQL injection in comicshout:comicshout (high 7.5)
- [CVE-2008-2455](https://insights.sbomify.com/CVE-2008-2455/): SQL injection in e107coders:e107 blog engine (high 7.5)
- [CVE-2008-2454](https://insights.sbomify.com/CVE-2008-2454/): SQL injection in joomla:com xsstream-dm (high 7.5)
- [CVE-2008-2453](https://insights.sbomify.com/CVE-2008-2453/): SQL injection in phpclassifiedsscript:php classifieds script (high 7.5)
- [CVE-2008-2452](https://insights.sbomify.com/CVE-2008-2452/): Cross-site scripting in inmedias:questionaire (medium 4.3)
- [CVE-2008-2451](https://insights.sbomify.com/CVE-2008-2451/): SQL injection in inmedias:statistics (high 7.5)
- [CVE-2008-2450](https://insights.sbomify.com/CVE-2008-2450/): Cross-site scripting in inmedias:statistics (medium 4.3)
- [CVE-2008-2449](https://insights.sbomify.com/CVE-2008-2449/): Cross-site scripting in ikemcg:phpinstantgallery (medium 4.3)
- [CVE-2008-2448](https://insights.sbomify.com/CVE-2008-2448/): SQL injection in aspindir:meto forum (high 7.5)
- [CVE-2008-2447](https://insights.sbomify.com/CVE-2008-2447/): SQL injection in mytipper:zogo shop (high 7.5)
- [CVE-2008-2446](https://insights.sbomify.com/CVE-2008-2446/): SQL injection in wgcc:web group communication center (high 7.5)
- [CVE-2008-2445](https://insights.sbomify.com/CVE-2008-2445/): Cross-site scripting in wgcc:web group communication center (medium 4.3)
- [CVE-2008-2444](https://insights.sbomify.com/CVE-2008-2444/): SQL injection in calogic:calogic calendars (high 7.5)
- [CVE-2008-2443](https://insights.sbomify.com/CVE-2008-2443/): SQL injection in therealestatescript:the real estate script (high 7.5)
- [CVE-2008-2441](https://insights.sbomify.com/CVE-2008-2441/): Memory corruption in cisco:secure access control server (high 7.5)
- [CVE-2008-2439](https://insights.sbomify.com/CVE-2008-2439/): Path traversal in trend micro:officescan (medium 5.0)
- [CVE-2008-2438](https://insights.sbomify.com/CVE-2008-2438/): Integer overflow in hp:openview network node manager (critical 10.0)
- [CVE-2008-2437](https://insights.sbomify.com/CVE-2008-2437/): Memory corruption in trend micro:client-server-messaging security (critical 10.0)
- [CVE-2008-2436](https://insights.sbomify.com/CVE-2008-2436/): Memory corruption in novell:iprint client (critical 9.3)
- [CVE-2008-2435](https://insights.sbomify.com/CVE-2008-2435/): Use after free in trend micro:housecall (critical 9.3)
- [CVE-2008-2434](https://insights.sbomify.com/CVE-2008-2434/): Code injection in trend micro:housecall (critical 9.3)
- [CVE-2008-2433](https://insights.sbomify.com/CVE-2008-2433/): Weak cryptography in trendmicro:client server messaging suite (critical 9.8)
- [CVE-2008-2432](https://insights.sbomify.com/CVE-2008-2432/): Information disclosure in novell:iprint (medium 5.0)
- [CVE-2008-2431](https://insights.sbomify.com/CVE-2008-2431/): Memory corruption in novell:iprint (critical 9.3)
- [CVE-2008-2430](https://insights.sbomify.com/CVE-2008-2430/): Integer overflow in videolan:vlc media player (critical 9.3)
- [CVE-2008-2429](https://insights.sbomify.com/CVE-2008-2429/): SQL injection in calendarix:basic (high 7.5)
- [CVE-2008-2428](https://insights.sbomify.com/CVE-2008-2428/): SQL injection in torrenttrader:torrenttrader classic (medium 6.8)
- [CVE-2008-2427](https://insights.sbomify.com/CVE-2008-2427/): Memory corruption in pagesperso-orange:gfl sdk (critical 9.3)
- [CVE-2008-2426](https://insights.sbomify.com/CVE-2008-2426/): Memory corruption in carsten haitzler:imlib2 (critical 9.3)
- [CVE-2008-2425](https://insights.sbomify.com/CVE-2008-2425/): SQL injection in fichive:fichive (high 7.5)
- [CVE-2008-2424](https://insights.sbomify.com/CVE-2008-2424/): Other in icdevgroup:interchange (critical 10.0)
- [CVE-2008-2423](https://insights.sbomify.com/CVE-2008-2423/): Denial of service in interchange development group:interchange (critical 10.0)
- [CVE-2008-2422](https://insights.sbomify.com/CVE-2008-2422/): SQL injection in webslider:webslider (high 7.5)
- [CVE-2008-2421](https://insights.sbomify.com/CVE-2008-2421/): Cross-site scripting in sap:sap web application server (medium 4.3)
- [CVE-2008-2420](https://insights.sbomify.com/CVE-2008-2420/): Security feature bypass in stunnel:stunnel (medium 6.8)
- [CVE-2008-2419](https://insights.sbomify.com/CVE-2008-2419/): Memory corruption in mozilla:firefox (medium 4.3)
- [CVE-2008-2418](https://insights.sbomify.com/CVE-2008-2418/): Race condition in sun:solaris (medium 4.7)
- [CVE-2008-2417](https://insights.sbomify.com/CVE-2008-2417/): SQL injection in how2asp:webboard (high 7.5)
- [CVE-2008-2416](https://insights.sbomify.com/CVE-2008-2416/): SQL injection in fichive:fichive (high 7.5)
- [CVE-2008-2415](https://insights.sbomify.com/CVE-2008-2415/): Path traversal in digitalhive:digitalhive (medium 6.8)
- [CVE-2008-2414](https://insights.sbomify.com/CVE-2008-2414/): Cross-site scripting in aguestbook:an guestbook (medium 4.3)
- [CVE-2008-2413](https://insights.sbomify.com/CVE-2008-2413/): Cross-site scripting in acgv.free:acgv news (medium 4.3)
- [CVE-2008-2412](https://insights.sbomify.com/CVE-2008-2412/): SQL injection in acgv.free:acgv news (high 7.5)
- [CVE-2008-2411](https://insights.sbomify.com/CVE-2008-2411/): SQL injection in sazcart:sazcart (medium 6.8)
- [CVE-2008-2410](https://insights.sbomify.com/CVE-2008-2410/): Cross-site scripting in ibm:lotus domino web server (medium 4.3)
- [CVE-2008-2409](https://insights.sbomify.com/CVE-2008-2409/): Memory corruption in cerulean studios:trillian (critical 9.3)
- [CVE-2008-2408](https://insights.sbomify.com/CVE-2008-2408/): Memory corruption in ceruleanstudios:trillian pro (critical 9.3)
- [CVE-2008-2407](https://insights.sbomify.com/CVE-2008-2407/): Memory corruption in ceruleanstudios:trillian (critical 9.3)
- [CVE-2008-2406](https://insights.sbomify.com/CVE-2008-2406/): Auth bypass in sun:java asp server (high 7.5)
- [CVE-2008-2405](https://insights.sbomify.com/CVE-2008-2405/): Command injection in sun:java active server pages (high 7.5)
- [CVE-2008-2404](https://insights.sbomify.com/CVE-2008-2404/): Memory corruption in sun:java asp server (critical 10.0)
- [CVE-2008-2403](https://insights.sbomify.com/CVE-2008-2403/): Path traversal in sun:java asp server (critical 10.0)
- [CVE-2008-2402](https://insights.sbomify.com/CVE-2008-2402/): Information disclosure in sun:java asp server (medium 5.0)
- [CVE-2008-2401](https://insights.sbomify.com/CVE-2008-2401/): Other in sun:java active server (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/47/