# Vulnerabilities published in 2008


- [CVE-2008-1978](https://insights.sbomify.com/CVE-2008-1978/): Cross-site scripting in drupal:ubercart module (low 3.5)
- [CVE-2008-1977](https://insights.sbomify.com/CVE-2008-1977/): Cross-site request forgery in internationalization project:internationalization (medium 4.3)
- [CVE-2008-1976](https://insights.sbomify.com/CVE-2008-1976/): Cross-site scripting in internationalization project:internationalization (medium 4.3)
- [CVE-2008-1975](https://insights.sbomify.com/CVE-2008-1975/): SQL injection in cogites:e reserve (high 7.5)
- [CVE-2008-1974](https://insights.sbomify.com/CVE-2008-1974/): Cross-site scripting in horde:groupware (medium 4.3)
- [CVE-2008-1973](https://insights.sbomify.com/CVE-2008-1973/): Memory corruption in artur sikora:subedit player (critical 9.3)
- [CVE-2008-1972](https://insights.sbomify.com/CVE-2008-1972/): Cross-site scripting in oicgroup:exponent cms (medium 4.3)
- [CVE-2008-1971](https://insights.sbomify.com/CVE-2008-1971/): Auth bypass in phphq:phshoutbox final (high 7.5)
- [CVE-2008-1970](https://insights.sbomify.com/CVE-2008-1970/): Information disclosure in mucommander:mucommander (low 2.1)
- [CVE-2008-1969](https://insights.sbomify.com/CVE-2008-1969/): Cross-site scripting in cezannesw:cezanne (low 3.5)
- [CVE-2008-1968](https://insights.sbomify.com/CVE-2008-1968/): SQL injection in cezannesw:cezanne (medium 6.0)
- [CVE-2008-1967](https://insights.sbomify.com/CVE-2008-1967/): Cross-site scripting in cezannesw:cezanne (medium 4.3)
- [CVE-2008-1966](https://insights.sbomify.com/CVE-2008-1966/): Memory corruption in ibm:db2 (medium 4.0)
- [CVE-2008-1965](https://insights.sbomify.com/CVE-2008-1965/): Command injection in ibm:lotus expeditor client (critical 9.3)
- [CVE-2008-1964](https://insights.sbomify.com/CVE-2008-1964/): Memory corruption in xinehq:xine lib (high 7.5)
- [CVE-2008-1963](https://insights.sbomify.com/CVE-2008-1963/): Code injection in quate:grape web statistics (high 7.5)
- [CVE-2008-1962](https://insights.sbomify.com/CVE-2008-1962/): Path traversal in chimaera:aterr (medium 6.8)
- [CVE-2008-1961](https://insights.sbomify.com/CVE-2008-1961/): SQL injection in php resource:voice of web allmyguests (high 7.5)
- [CVE-2008-1960](https://insights.sbomify.com/CVE-2008-1960/): Cross-site scripting in contray:contray (medium 4.3)
- [CVE-2008-1959](https://insights.sbomify.com/CVE-2008-1959/): Memory corruption in sipp:sipp (high 7.5)
- [CVE-2008-1958](https://insights.sbomify.com/CVE-2008-1958/): File upload in easyscripts:tr script news (medium 6.5)
- [CVE-2008-1957](https://insights.sbomify.com/CVE-2008-1957/): SQL injection in easyscripts:tr script news (high 7.5)
- [CVE-2008-1956](https://insights.sbomify.com/CVE-2008-1956/): Cross-site scripting in wikepage:opus (medium 4.3)
- [CVE-2008-1955](https://insights.sbomify.com/CVE-2008-1955/): Cross-site scripting in toocharger:myboard (medium 4.3)
- [CVE-2008-1954](https://insights.sbomify.com/CVE-2008-1954/): SQL injection in webcalendar:web calendar pro (high 7.5)
- [CVE-2008-1953](https://insights.sbomify.com/CVE-2008-1953/): Cross-site scripting in magnolia:site designer (medium 4.3)
- [CVE-2008-1952](https://insights.sbomify.com/CVE-2008-1952/): Denial of service in xensource:xen para virtualized frame buffer (low 2.1)
- [CVE-2008-1951](https://insights.sbomify.com/CVE-2008-1951/): Privilege escalation in redhat:enterprise linux (medium 4.6)
- [CVE-2008-1950](https://insights.sbomify.com/CVE-2008-1950/): Integer overflow in gnu:gnutls (medium 5.0)
- [CVE-2008-1949](https://insights.sbomify.com/CVE-2008-1949/): Null dereference in gnu:gnutls (critical 9.3)
- [CVE-2008-1948](https://insights.sbomify.com/CVE-2008-1948/): Memory corruption in gnu:gnutls (critical 10.0)
- [CVE-2008-1947](https://insights.sbomify.com/CVE-2008-1947/): Apache Tomcat Cross-site scripting (XSS) vulnerability (medium 4.3)
- [CVE-2008-1946](https://insights.sbomify.com/CVE-2008-1946/): Misconfiguration in gnu:coreutils (medium 4.4)
- [CVE-2008-1945](https://insights.sbomify.com/CVE-2008-1945/): Path traversal in canonical:ubuntu linux (low 2.1)
- [CVE-2008-1944](https://insights.sbomify.com/CVE-2008-1944/): Memory corruption in xensource:xen (high 7.2)
- [CVE-2008-1943](https://insights.sbomify.com/CVE-2008-1943/): Memory corruption in xensource:xen (low 2.1)
- [CVE-2008-1942](https://insights.sbomify.com/CVE-2008-1942/): Memory corruption in foxit software:reader (medium 6.8)
- [CVE-2008-1941](https://insights.sbomify.com/CVE-2008-1941/): Cross-site scripting in akiva:webboard (low 3.5)
- [CVE-2008-1940](https://insights.sbomify.com/CVE-2008-1940/): Security feature bypass in grsecurity:grsecurity kernel patch (medium 4.6)
- [CVE-2008-1939](https://insights.sbomify.com/CVE-2008-1939/): SQL injection in aspindir:philboard (high 7.5)
- [CVE-2008-1938](https://insights.sbomify.com/CVE-2008-1938/): Security feature bypass in sony:mylo com 2 (medium 6.4)
- [CVE-2008-1937](https://insights.sbomify.com/CVE-2008-1937/): MoinMoin vulnerable to privilege escalation (medium 6.8)
- [CVE-2008-1936](https://insights.sbomify.com/CVE-2008-1936/): SQL injection in classifieds caffe:classifieds caffe (high 7.5)
- [CVE-2008-1935](https://insights.sbomify.com/CVE-2008-1935/): SQL injection in joomla:joomla (high 7.5)
- [CVE-2008-1934](https://insights.sbomify.com/CVE-2008-1934/): SQL injection in crazy goomba:crazy goomba (high 7.5)
- [CVE-2008-1933](https://insights.sbomify.com/CVE-2008-1933/): Path traversal in microsoft:zune software (medium 4.3)
- [CVE-2008-1932](https://insights.sbomify.com/CVE-2008-1932/): Integer overflow in realtek:hd audio codec drivers (medium 6.8)
- [CVE-2008-1931](https://insights.sbomify.com/CVE-2008-1931/): Privilege escalation in realtek:hd audio codec drivers (medium 6.8)
- [CVE-2008-1930](https://insights.sbomify.com/CVE-2008-1930/): Weak cryptography in wordpress:wordpress (high 7.5)
- [CVE-2008-1928](https://insights.sbomify.com/CVE-2008-1928/): Memory corruption in imager:imager (medium 5.0)
- [CVE-2008-1927](https://insights.sbomify.com/CVE-2008-1927/): Memory corruption in perl:perl (medium 5.0)
- [CVE-2008-1926](https://insights.sbomify.com/CVE-2008-1926/): Other in linux:util-linux (high 7.5)
- [CVE-2008-1925](https://insights.sbomify.com/CVE-2008-1925/): Memory corruption in inspircd:inspircd (medium 5.0)
- [CVE-2008-1924](https://insights.sbomify.com/CVE-2008-1924/): Information disclosure in phpmyadmin:phpmyadmin (low 3.5)
- [CVE-2008-1923](https://insights.sbomify.com/CVE-2008-1923/): Denial of service in asterisk:asterisk appliance developer kit (high 7.1)
- [CVE-2008-1922](https://insights.sbomify.com/CVE-2008-1922/): Memory corruption in sarg:squid analysis report generator (critical 10.0)
- [CVE-2008-1921](https://insights.sbomify.com/CVE-2008-1921/): SQL injection in 5th avenue software:5th avenue shopping cart (high 7.5)
- [CVE-2008-1920](https://insights.sbomify.com/CVE-2008-1920/): Memory corruption in icq:mirabilis icq (high 7.5)
- [CVE-2008-1919](https://insights.sbomify.com/CVE-2008-1919/): SQL injection in yourfreeworld:apartment search script (high 7.5)
- [CVE-2008-1918](https://insights.sbomify.com/CVE-2008-1918/): SQL injection in php-fusion:php-fusion (medium 6.0)
- [CVE-2008-1917](https://insights.sbomify.com/CVE-2008-1917/): Cross-site scripting in amfphp:amfphp (medium 4.3)
- [CVE-2008-1916](https://insights.sbomify.com/CVE-2008-1916/): Cross-site scripting in drupal:ubercart module (medium 4.3)
- [CVE-2008-1915](https://insights.sbomify.com/CVE-2008-1915/): SQL injection in devworx:blogworx (high 7.5)
- [CVE-2008-1914](https://insights.sbomify.com/CVE-2008-1914/): Memory corruption in bigantsoft:bigant messenger (critical 10.0)
- [CVE-2008-1913](https://insights.sbomify.com/CVE-2008-1913/): SQL injection in lasernet cms:lasernet cms (high 7.5)
- [CVE-2008-1912](https://insights.sbomify.com/CVE-2008-1912/): Memory corruption in divx:divx player (critical 9.3)
- [CVE-2008-1911](https://insights.sbomify.com/CVE-2008-1911/): SQL injection in 1024 cms:1024 cms (medium 6.8)
- [CVE-2008-1910](https://insights.sbomify.com/CVE-2008-1910/): Memory corruption in borland:interbase (critical 10.0)
- [CVE-2008-1909](https://insights.sbomify.com/CVE-2008-1909/): SQL injection in chadha software technologies:phpkb knowledge base (high 7.5)
- [CVE-2008-1908](https://insights.sbomify.com/CVE-2008-1908/): Path traversal in cpcommerce:cpcommerce (high 7.5)
- [CVE-2008-1907](https://insights.sbomify.com/CVE-2008-1907/): SQL injection in cpcommerce:cpcommerce (high 7.5)
- [CVE-2008-1906](https://insights.sbomify.com/CVE-2008-1906/): Cross-site scripting in cpcommerce:cpcommerce (medium 4.3)
- [CVE-2008-1905](https://insights.sbomify.com/CVE-2008-1905/): Null dereference in nero:mediahome (medium 5.0)
- [CVE-2008-1904](https://insights.sbomify.com/CVE-2008-1904/): Auth bypass in cicoandcico:ccmail (high 7.5)
- [CVE-2008-1903](https://insights.sbomify.com/CVE-2008-1903/): Code injection in newanz:newsoffice (high 7.5)
- [CVE-2008-1902](https://insights.sbomify.com/CVE-2008-1902/): Security feature bypass in debian:aptlinex (medium 5.0)
- [CVE-2008-1901](https://insights.sbomify.com/CVE-2008-1901/): Race condition in debian:aptlinex (high 7.2)
- [CVE-2008-1900](https://insights.sbomify.com/CVE-2008-1900/): Missing authorization in carbon communities:carbon communities (high 7.5)
- [CVE-2008-1898](https://insights.sbomify.com/CVE-2008-1898/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2008-1897](https://insights.sbomify.com/CVE-2008-1897/): Denial of service in asterisk:asterisk appliance developer kit (medium 4.3)
- [CVE-2008-1896](https://insights.sbomify.com/CVE-2008-1896/): Cross-site scripting in carboncommunities:carbon communities (medium 4.3)
- [CVE-2008-1895](https://insights.sbomify.com/CVE-2008-1895/): SQL injection in carboncommunities:carbon communities (high 7.5)
- [CVE-2008-1894](https://insights.sbomify.com/CVE-2008-1894/): Cross-site scripting in businessobjects:infoview (medium 4.3)
- [CVE-2008-1893](https://insights.sbomify.com/CVE-2008-1893/): Code injection in w2b:online banking (high 7.5)
- [CVE-2008-1892](https://insights.sbomify.com/CVE-2008-1892/): Cross-site scripting in blogator script:blogator script (medium 4.3)
- [CVE-2008-1891](https://insights.sbomify.com/CVE-2008-1891/): Path traversal in ruby-lang:ruby (medium 5.0)
- [CVE-2008-1890](https://insights.sbomify.com/CVE-2008-1890/): SQL injection in azrul:jom comment (high 7.5)
- [CVE-2008-1889](https://insights.sbomify.com/CVE-2008-1889/): SQL injection in xplodphp:autotutorials (high 7.5)
- [CVE-2008-1888](https://insights.sbomify.com/CVE-2008-1888/): Cross-site scripting in microsoft:sharepoint server (medium 4.3)
- [CVE-2008-1887](https://insights.sbomify.com/CVE-2008-1887/): Memory corruption in canonical:ubuntu linux (critical 9.3)
- [CVE-2008-1886](https://insights.sbomify.com/CVE-2008-1886/): Weak cryptography in cdnetworks:download client (high 7.5)
- [CVE-2008-1885](https://insights.sbomify.com/CVE-2008-1885/): Path traversal in cdnetworks:download client (medium 6.8)
- [CVE-2008-1884](https://insights.sbomify.com/CVE-2008-1884/): Path traversal in wikepage:opus (medium 5.0)
- [CVE-2008-1883](https://insights.sbomify.com/CVE-2008-1883/): Auth bypass in blackboard:blackboard academic suite (medium 6.8)
- [CVE-2008-1881](https://insights.sbomify.com/CVE-2008-1881/): Memory corruption in videolan:vlc (medium 6.8)
- [CVE-2008-1880](https://insights.sbomify.com/CVE-2008-1880/): Misconfiguration in firebird:firebird (medium 5.0)
- [CVE-2008-1878](https://insights.sbomify.com/CVE-2008-1878/): Memory corruption in xine:xine-lib (high 7.5)
- [CVE-2008-1877](https://insights.sbomify.com/CVE-2008-1877/): Privilege escalation in debian:tss (low 2.1)
- [CVE-2008-1876](https://insights.sbomify.com/CVE-2008-1876/): Code injection in snarky:visualpic (medium 6.8)
- [CVE-2008-1875](https://insights.sbomify.com/CVE-2008-1875/): SQL injection in terong:advanced web photo gallery (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/52/