# Vulnerabilities published in 2008


- [CVE-2008-2294](https://insights.sbomify.com/CVE-2008-2294/): Auth bypass in mreaves:pet grooming management system (high 7.5)
- [CVE-2008-2293](https://insights.sbomify.com/CVE-2008-2293/): Auth bypass in tpvgames:mpcs (high 7.5)
- [CVE-2008-2292](https://insights.sbomify.com/CVE-2008-2292/): Memory corruption in net-snmp:net-snmp (medium 6.8)
- [CVE-2008-2291](https://insights.sbomify.com/CVE-2008-2291/): Weak cryptography in symantec:altiris deployment solution (high 7.5)
- [CVE-2008-2290](https://insights.sbomify.com/CVE-2008-2290/): Privilege escalation in symantec:altiris deployment solution (high 7.2)
- [CVE-2008-2289](https://insights.sbomify.com/CVE-2008-2289/): Privilege escalation in symantec:altiris deployment solution (high 7.2)
- [CVE-2008-2288](https://insights.sbomify.com/CVE-2008-2288/): Missing authorization in symantec:altiris deployment solution (low 3.6)
- [CVE-2008-2287](https://insights.sbomify.com/CVE-2008-2287/): Misconfiguration in symantec:altiris deployment solution (high 7.2)
- [CVE-2008-2286](https://insights.sbomify.com/CVE-2008-2286/): SQL injection in symantec:altiris deployment solution (high 7.5)
- [CVE-2008-2285](https://insights.sbomify.com/CVE-2008-2285/): Weak cryptography in ubuntu:linux (medium 5.0)
- [CVE-2008-2284](https://insights.sbomify.com/CVE-2008-2284/): Code injection in fusebox:fusebox (high 7.5)
- [CVE-2008-2283](https://insights.sbomify.com/CVE-2008-2283/): Other in idautomation:aztec barcode (critical 9.3)
- [CVE-2008-2282](https://insights.sbomify.com/CVE-2008-2282/): Auth bypass in thomas voecking:internet photoshow (high 7.5)
- [CVE-2008-2281](https://insights.sbomify.com/CVE-2008-2281/): Cross-site scripting in microsoft:ie (critical 9.3)
- [CVE-2008-2280](https://insights.sbomify.com/CVE-2008-2280/): Cross-site scripting in scriptphp:picengine (medium 4.3)
- [CVE-2008-2279](https://insights.sbomify.com/CVE-2008-2279/): Information disclosure in freelance auction:freelance auction script (medium 5.0)
- [CVE-2008-2278](https://insights.sbomify.com/CVE-2008-2278/): SQL injection in freelanceauction:freelance auction script (high 7.5)
- [CVE-2008-2277](https://insights.sbomify.com/CVE-2008-2277/): SQL injection in cmsnx:feedback and rating script (high 7.5)
- [CVE-2008-2276](https://insights.sbomify.com/CVE-2008-2276/): Cross-site request forgery in matisbt:mantis (medium 6.8)
- [CVE-2008-2275](https://insights.sbomify.com/CVE-2008-2275/): Code injection in typo3:sr feuser register extension (high 7.5)
- [CVE-2008-2274](https://insights.sbomify.com/CVE-2008-2274/): Cross-site scripting in typo3:sr feuser register extension (medium 4.3)
- [CVE-2008-2273](https://insights.sbomify.com/CVE-2008-2273/): Privilege escalation in arubanetworks:arubaos (critical 9.0)
- [CVE-2008-2272](https://insights.sbomify.com/CVE-2008-2272/): Cross-site scripting in aruba networks:aruba mobility controller (medium 4.3)
- [CVE-2008-2271](https://insights.sbomify.com/CVE-2008-2271/): Privilege escalation in site documentation project:site documentation (medium 5.0)
- [CVE-2008-2270](https://insights.sbomify.com/CVE-2008-2270/): Code injection in phpway:kostenloses linkmanagementscript (high 7.5)
- [CVE-2008-2269](https://insights.sbomify.com/CVE-2008-2269/): Auth bypass in kevin ludlow:austinsmoke gastracker (high 7.5)
- [CVE-2008-2268](https://insights.sbomify.com/CVE-2008-2268/): Open redirect in mdsjack:mjguest (medium 4.3)
- [CVE-2008-2267](https://insights.sbomify.com/CVE-2008-2267/): File upload in cms made simple:cms made simple (high 7.5)
- [CVE-2008-2266](https://insights.sbomify.com/CVE-2008-2266/): Race condition in nzbget:nzbget (medium 4.4)
- [CVE-2008-2265](https://insights.sbomify.com/CVE-2008-2265/): SQL injection in emophp:emo realty manager (high 7.5)
- [CVE-2008-2264](https://insights.sbomify.com/CVE-2008-2264/): Cross-site scripting in oued:cyrixmed (medium 4.3)
- [CVE-2008-2263](https://insights.sbomify.com/CVE-2008-2263/): SQL injection in cmsnx:automated link exchange portal (high 7.5)
- [CVE-2008-2259](https://insights.sbomify.com/CVE-2008-2259/): Code injection in microsoft:internet explorer (critical 9.3)
- [CVE-2008-2258](https://insights.sbomify.com/CVE-2008-2258/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2008-2257](https://insights.sbomify.com/CVE-2008-2257/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2008-2256](https://insights.sbomify.com/CVE-2008-2256/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2008-2255](https://insights.sbomify.com/CVE-2008-2255/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2008-2254](https://insights.sbomify.com/CVE-2008-2254/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2008-2253](https://insights.sbomify.com/CVE-2008-2253/): Memory corruption in microsoft:windows media player (critical 9.3)
- [CVE-2008-2252](https://insights.sbomify.com/CVE-2008-2252/): Memory corruption in microsoft:windows 2000 (high 7.2)
- [CVE-2008-2251](https://insights.sbomify.com/CVE-2008-2251/): Memory corruption in microsoft:windows 2000 (high 7.2)
- [CVE-2008-2250](https://insights.sbomify.com/CVE-2008-2250/): Privilege escalation in microsoft:windows 2000 (high 7.2)
- [CVE-2008-2249](https://insights.sbomify.com/CVE-2008-2249/): Integer overflow in microsoft:windows 2000 (critical 9.3)
- [CVE-2008-2248](https://insights.sbomify.com/CVE-2008-2248/): Cross-site scripting in microsoft:exchange server (medium 4.3)
- [CVE-2008-2247](https://insights.sbomify.com/CVE-2008-2247/): Cross-site scripting in microsoft:exchange server (medium 4.3)
- [CVE-2008-2246](https://insights.sbomify.com/CVE-2008-2246/): Security feature bypass in microsoft:windows-nt (high 7.8)
- [CVE-2008-2245](https://insights.sbomify.com/CVE-2008-2245/): Memory corruption in microsoft:windows 2000 (critical 9.3)
- [CVE-2008-2244](https://insights.sbomify.com/CVE-2008-2244/): Memory corruption in microsoft:office word (critical 9.3)
- [CVE-2008-2242](https://insights.sbomify.com/CVE-2008-2242/): Memory corruption in broadcom:brightstor arcserve backup (high 7.5)
- [CVE-2008-2241](https://insights.sbomify.com/CVE-2008-2241/): Path traversal in broadcom:brightstor arcserve backup (critical 10.0)
- [CVE-2008-2240](https://insights.sbomify.com/CVE-2008-2240/): Memory corruption in ibm:lotus domino (critical 10.0)
- [CVE-2008-2238](https://insights.sbomify.com/CVE-2008-2238/): Integer overflow in openoffice:openoffice.org (critical 9.3)
- [CVE-2008-2237](https://insights.sbomify.com/CVE-2008-2237/): Memory corruption in openoffice:openoffice.org (critical 9.3)
- [CVE-2008-2236](https://insights.sbomify.com/CVE-2008-2236/): Cross-site scripting in blosxom:blosxom (medium 4.3)
- [CVE-2008-2235](https://insights.sbomify.com/CVE-2008-2235/): Misconfiguration in opensc-project:opensc (medium 4.9)
- [CVE-2008-2234](https://insights.sbomify.com/CVE-2008-2234/): Memory corruption in openwsman:openwsman (high 7.5)
- [CVE-2008-2233](https://insights.sbomify.com/CVE-2008-2233/): Security feature bypass in openwsman:openwsman (high 7.5)
- [CVE-2008-2232](https://insights.sbomify.com/CVE-2008-2232/): Command injection in afuse:afuse (medium 4.6)
- [CVE-2008-2231](https://insights.sbomify.com/CVE-2008-2231/): SQL injection in slashcode.com:slash (high 7.5)
- [CVE-2008-2230](https://insights.sbomify.com/CVE-2008-2230/): Code injection in reportbug-ng:reportbug (medium 4.6)
- [CVE-2008-2228](https://insights.sbomify.com/CVE-2008-2228/): Code injection in cyberfolio:cyberfolio (critical 9.3)
- [CVE-2008-2227](https://insights.sbomify.com/CVE-2008-2227/): Path traversal in php-fusion:forum rank system (medium 6.8)
- [CVE-2008-2226](https://insights.sbomify.com/CVE-2008-2226/): Missing authorization in openkm:openkm (medium 5.0)
- [CVE-2008-2225](https://insights.sbomify.com/CVE-2008-2225/): SQL injection in gamecms:gamecms lite (high 7.5)
- [CVE-2008-2224](https://insights.sbomify.com/CVE-2008-2224/): Code injection in sazcart:sazcart (medium 6.8)
- [CVE-2008-2223](https://insights.sbomify.com/CVE-2008-2223/): SQL injection in buyscripts:vshare youtube clone (high 7.5)
- [CVE-2008-2222](https://insights.sbomify.com/CVE-2008-2222/): SQL injection in eqdkp:eqdkp (high 7.5)
- [CVE-2008-2221](https://insights.sbomify.com/CVE-2008-2221/): Privilege escalation in ibm:websphere application server (critical 10.0)
- [CVE-2008-2220](https://insights.sbomify.com/CVE-2008-2220/): Code injection in interact:interact (medium 6.8)
- [CVE-2008-2219](https://insights.sbomify.com/CVE-2008-2219/): Cross-site scripting in c-news.fr:c-news (medium 4.3)
- [CVE-2008-2218](https://insights.sbomify.com/CVE-2008-2218/): Memory corruption in nortel:multimedia communications server (medium 5.0)
- [CVE-2008-2217](https://insights.sbomify.com/CVE-2008-2217/): Path traversal in mario valdez:content management system (medium 6.8)
- [CVE-2008-2216](https://insights.sbomify.com/CVE-2008-2216/): File upload in pbcs:project-based calendaring system (critical 9.0)
- [CVE-2008-2215](https://insights.sbomify.com/CVE-2008-2215/): Path traversal in pbcs:project-based calendaring system (medium 5.0)
- [CVE-2008-2214](https://insights.sbomify.com/CVE-2008-2214/): Memory corruption in castle rock:snmpc (critical 10.0)
- [CVE-2008-2213](https://insights.sbomify.com/CVE-2008-2213/): Cross-site scripting in maianscriptworld:maian links (medium 4.3)
- [CVE-2008-2212](https://insights.sbomify.com/CVE-2008-2212/): Cross-site scripting in maianscriptworld:maian cart (medium 4.3)
- [CVE-2008-2211](https://insights.sbomify.com/CVE-2008-2211/): Cross-site scripting in maianscriptworld:maian guestbook (medium 4.3)
- [CVE-2008-2210](https://insights.sbomify.com/CVE-2008-2210/): Cross-site scripting in maianscriptworld:maian support (medium 4.3)
- [CVE-2008-2209](https://insights.sbomify.com/CVE-2008-2209/): Cross-site scripting in maianscriptworld:maian greeting (medium 4.3)
- [CVE-2008-2208](https://insights.sbomify.com/CVE-2008-2208/): SQL injection in maianscriptworld:maian greeting (high 7.5)
- [CVE-2008-2207](https://insights.sbomify.com/CVE-2008-2207/): Cross-site scripting in maianscriptworld:maian gallery (medium 4.3)
- [CVE-2008-2206](https://insights.sbomify.com/CVE-2008-2206/): Cross-site scripting in maianscriptworld:maian music (medium 4.3)
- [CVE-2008-2205](https://insights.sbomify.com/CVE-2008-2205/): SQL injection in maianscriptworld:maian music (high 7.5)
- [CVE-2008-2204](https://insights.sbomify.com/CVE-2008-2204/): Cross-site scripting in maianscriptworld:maian search (medium 4.3)
- [CVE-2008-2203](https://insights.sbomify.com/CVE-2008-2203/): SQL injection in maianscriptworld:maian search (high 7.5)
- [CVE-2008-2202](https://insights.sbomify.com/CVE-2008-2202/): Cross-site scripting in maianscriptworld:maian uploader (medium 4.3)
- [CVE-2008-2201](https://insights.sbomify.com/CVE-2008-2201/): Cross-site scripting in maianscriptworld:maian recipe (medium 4.3)
- [CVE-2008-2200](https://insights.sbomify.com/CVE-2008-2200/): Cross-site scripting in maianscriptworld:maian weblog (medium 4.3)
- [CVE-2008-2199](https://insights.sbomify.com/CVE-2008-2199/): Code injection in kkeim:kmita mail (medium 6.8)
- [CVE-2008-2198](https://insights.sbomify.com/CVE-2008-2198/): Code injection in kmita tellfriend:tellfriend (medium 6.8)
- [CVE-2008-2197](https://insights.sbomify.com/CVE-2008-2197/): SQL injection in miniweb2:blog writer (high 7.5)
- [CVE-2008-2196](https://insights.sbomify.com/CVE-2008-2196/): Cross-site scripting in lifetype:lifetype (medium 4.3)
- [CVE-2008-2195](https://insights.sbomify.com/CVE-2008-2195/): Code injection in deluxebb:deluxebb (medium 6.5)
- [CVE-2008-2194](https://insights.sbomify.com/CVE-2008-2194/): SQL injection in deluxebb:deluxebb (high 7.5)
- [CVE-2008-2193](https://insights.sbomify.com/CVE-2008-2193/): Code injection in scorpnews:scorpnews (high 7.5)
- [CVE-2008-2192](https://insights.sbomify.com/CVE-2008-2192/): Code injection in itcms:itcms (critical 10.0)
- [CVE-2008-2191](https://insights.sbomify.com/CVE-2008-2191/): SQL injection in postnuke software foundation:pnencyclopedia (medium 6.8)
- [CVE-2008-2190](https://insights.sbomify.com/CVE-2008-2190/): SQL injection in romedchim international srl:online rent property script (medium 6.8)
- [CVE-2008-2189](https://insights.sbomify.com/CVE-2008-2189/): SQL injection in anserv:auction xl (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/49/