# Vulnerabilities published in 2008


- [CVE-2008-1352](https://insights.sbomify.com/CVE-2008-1352/): Path traversal in hangzhou network technology development:ediorcms (medium 5.0)
- [CVE-2008-1351](https://insights.sbomify.com/CVE-2008-1351/): SQL injection in xoops:tutoriais module (high 7.5)
- [CVE-2008-1350](https://insights.sbomify.com/CVE-2008-1350/): SQL injection in fully modded phpbb:fully modded phpbb (high 7.5)
- [CVE-2008-1349](https://insights.sbomify.com/CVE-2008-1349/): SQL injection in exv2:bamagalerie (high 7.5)
- [CVE-2008-1348](https://insights.sbomify.com/CVE-2008-1348/): Cross-site scripting in ewebsite:eweather (medium 4.3)
- [CVE-2008-1347](https://insights.sbomify.com/CVE-2008-1347/): Cross-site scripting in myiosoft:easycalendar (medium 4.3)
- [CVE-2008-1346](https://insights.sbomify.com/CVE-2008-1346/): SQL injection in myiosoft:easycalendar (high 7.5)
- [CVE-2008-1345](https://insights.sbomify.com/CVE-2008-1345/): Cross-site scripting in myiosoft:easycalendar (medium 4.3)
- [CVE-2008-1344](https://insights.sbomify.com/CVE-2008-1344/): SQL injection in myiosoft:easycalendar (high 7.5)
- [CVE-2008-1343](https://insights.sbomify.com/CVE-2008-1343/): Path traversal in sco:unixware (medium 4.9)
- [CVE-2008-1342](https://insights.sbomify.com/CVE-2008-1342/): Cross-site scripting in polymita technologies:bpm suite (medium 4.3)
- [CVE-2008-1341](https://insights.sbomify.com/CVE-2008-1341/): SQL injection in lagarde:storefront (high 7.5)
- [CVE-2008-1340](https://insights.sbomify.com/CVE-2008-1340/): Memory corruption in vmware:ace (high 7.1)
- [CVE-2008-1338](https://insights.sbomify.com/CVE-2008-1338/): Denial of service in perforce:perforce server (high 7.8)
- [CVE-2008-1337](https://insights.sbomify.com/CVE-2008-1337/): Denial of service in netopia:timbuktu pro (medium 5.0)
- [CVE-2008-1336](https://insights.sbomify.com/CVE-2008-1336/): SQL injection in koobi:koobi cms (high 7.5)
- [CVE-2008-1335](https://insights.sbomify.com/CVE-2008-1335/): Security feature bypass in netbsd:netbsd (critical 9.3)
- [CVE-2008-1334](https://insights.sbomify.com/CVE-2008-1334/): Auth bypass in bt:home hub (high 7.5)
- [CVE-2008-1333](https://insights.sbomify.com/CVE-2008-1333/): Memory corruption in asterisk:open source (medium 5.8)
- [CVE-2008-1332](https://insights.sbomify.com/CVE-2008-1332/): Auth bypass in asterisk:asterisk (high 8.8)
- [CVE-2008-1331](https://insights.sbomify.com/CVE-2008-1331/): Command injection in alcatel-lucent:omnipcx office (critical 10.0)
- [CVE-2008-1330](https://insights.sbomify.com/CVE-2008-1330/): Missing authorization in novell:groupwise (low 3.5)
- [CVE-2008-1329](https://insights.sbomify.com/CVE-2008-1329/): File upload in broadcom:desktop management suite (critical 10.0)
- [CVE-2008-1328](https://insights.sbomify.com/CVE-2008-1328/): Memory corruption in broadcom:desktop management suite (critical 9.3)
- [CVE-2008-1327](https://insights.sbomify.com/CVE-2008-1327/): Missing authorization in gallarific:gallarific (high 7.5)
- [CVE-2008-1326](https://insights.sbomify.com/CVE-2008-1326/): Cross-site scripting in gallarific:gallarific (medium 4.3)
- [CVE-2008-1325](https://insights.sbomify.com/CVE-2008-1325/): Path traversal in leinir turthra:uberghey cms (high 7.5)
- [CVE-2008-1324](https://insights.sbomify.com/CVE-2008-1324/): Path traversal in leinir:travelsized cms (high 7.5)
- [CVE-2008-1323](https://insights.sbomify.com/CVE-2008-1323/): Cross-site request forgery in woltlab:burning board lite (medium 6.8)
- [CVE-2008-1322](https://insights.sbomify.com/CVE-2008-1322/): Command injection in asg-sentry:asg-sentry (high 7.8)
- [CVE-2008-1321](https://insights.sbomify.com/CVE-2008-1321/): Auth bypass in asg-sentry:asg-sentry (medium 5.0)
- [CVE-2008-1320](https://insights.sbomify.com/CVE-2008-1320/): Memory corruption in asg:asg-sentry (critical 10.0)
- [CVE-2008-1319](https://insights.sbomify.com/CVE-2008-1319/): Command injection in versant:versant object database (critical 9.3)
- [CVE-2008-1318](https://insights.sbomify.com/CVE-2008-1318/): Information disclosure in mediawiki:mediawiki (medium 5.0)
- [CVE-2008-1317](https://insights.sbomify.com/CVE-2008-1317/): Denial of service in sun:solaris (medium 4.9)
- [CVE-2008-1316](https://insights.sbomify.com/CVE-2008-1316/): SQL injection in qt-cute:quicktalk forum (medium 6.8)
- [CVE-2008-1315](https://insights.sbomify.com/CVE-2008-1315/): SQL injection in php-nuke:zclassifieds (high 7.5)
- [CVE-2008-1314](https://insights.sbomify.com/CVE-2008-1314/): SQL injection in johannes hass:gaestebuch module (high 7.5)
- [CVE-2008-1313](https://insights.sbomify.com/CVE-2008-1313/): SQL injection in bill roberts:bloo (high 7.5)
- [CVE-2008-1312](https://insights.sbomify.com/CVE-2008-1312/): Denial of service in packettrap:pt360 tool suite (medium 5.0)
- [CVE-2008-1311](https://insights.sbomify.com/CVE-2008-1311/): Denial of service in packettrap:pt360 tool suite pro (medium 5.0)
- [CVE-2008-1310](https://insights.sbomify.com/CVE-2008-1310/): Path traversal in packettrap:pt360 tool suite (critical 10.0)
- [CVE-2008-1309](https://insights.sbomify.com/CVE-2008-1309/): Memory corruption in realnetworks:realplayer (critical 9.3)
- [CVE-2008-1308](https://insights.sbomify.com/CVE-2008-1308/): SQL injection in sudirman angriawan:nukec30 (high 7.5)
- [CVE-2008-1307](https://insights.sbomify.com/CVE-2008-1307/): Memory corruption in kingsoft:antivirus online update module (critical 10.0)
- [CVE-2008-1306](https://insights.sbomify.com/CVE-2008-1306/): Cross-site scripting in besavvy:savvy content manager (medium 4.3)
- [CVE-2008-1305](https://insights.sbomify.com/CVE-2008-1305/): SQL injection in chieminger:filebase module (high 7.5)
- [CVE-2008-1304](https://insights.sbomify.com/CVE-2008-1304/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2008-1303](https://insights.sbomify.com/CVE-2008-1303/): Null dereference in perforce:perforce server (medium 5.0)
- [CVE-2008-1302](https://insights.sbomify.com/CVE-2008-1302/): Integer overflow in perforce:perforce server (medium 5.0)
- [CVE-2008-1301](https://insights.sbomify.com/CVE-2008-1301/): Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter (medium 4.0)
- [CVE-2008-1300](https://insights.sbomify.com/CVE-2008-1300/): Alkacon Open CMS XSS via Logfile Viewer Settings function (medium 4.3)
- [CVE-2008-1299](https://insights.sbomify.com/CVE-2008-1299/): Cross-site scripting in manageengine:servicedesk plus (medium 6.1)
- [CVE-2008-1298](https://insights.sbomify.com/CVE-2008-1298/): SQL injection in kyantonius:hadith module (high 7.5)
- [CVE-2008-1297](https://insights.sbomify.com/CVE-2008-1297/): SQL injection in ewriting:ewriting (high 7.5)
- [CVE-2008-1296](https://insights.sbomify.com/CVE-2008-1296/): Cross-site scripting in encaps:encapsgallery (medium 4.3)
- [CVE-2008-1295](https://insights.sbomify.com/CVE-2008-1295/): SQL injection in gregory kokanosky:phpmynewsletter (medium 6.8)
- [CVE-2008-1294](https://insights.sbomify.com/CVE-2008-1294/): Security feature bypass in linux:linux kernel (low 2.1)
- [CVE-2008-1293](https://insights.sbomify.com/CVE-2008-1293/): Misconfiguration in ltsp:linux terminal server project (medium 4.8)
- [CVE-2008-1292](https://insights.sbomify.com/CVE-2008-1292/): Missing authorization in viewvc:viewvc (medium 4.3)
- [CVE-2008-1291](https://insights.sbomify.com/CVE-2008-1291/): Information disclosure in viewvc:viewvc (medium 4.3)
- [CVE-2008-1290](https://insights.sbomify.com/CVE-2008-1290/): Information disclosure in viewvc:viewvc (medium 4.3)
- [CVE-2008-1289](https://insights.sbomify.com/CVE-2008-1289/): Memory corruption in asterisk:asterisk appliance developer kit (high 7.5)
- [CVE-2008-1288](https://insights.sbomify.com/CVE-2008-1288/): Information disclosure in ibm:rational clearquest (medium 5.0)
- [CVE-2008-1287](https://insights.sbomify.com/CVE-2008-1287/): Information disclosure in ibm:rational clearquest (medium 5.0)
- [CVE-2008-1286](https://insights.sbomify.com/CVE-2008-1286/): Information disclosure in sun:java web console (high 7.8)
- [CVE-2008-1285](https://insights.sbomify.com/CVE-2008-1285/): Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) (medium 4.3)
- [CVE-2008-1284](https://insights.sbomify.com/CVE-2008-1284/): Path traversal in horde:groupware (medium 6.0)
- [CVE-2008-1283](https://insights.sbomify.com/CVE-2008-1283/): Cross-site scripting in silver-forge:neptune web server (medium 4.3)
- [CVE-2008-1282](https://insights.sbomify.com/CVE-2008-1282/): Memory corruption in b21soft:bfup (critical 9.3)
- [CVE-2008-1281](https://insights.sbomify.com/CVE-2008-1281/): Path traversal in argontechnology:client management services (medium 5.0)
- [CVE-2008-1280](https://insights.sbomify.com/CVE-2008-1280/): Null dereference in acronis:true image (medium 5.0)
- [CVE-2008-1279](https://insights.sbomify.com/CVE-2008-1279/): Denial of service in acronis:true image (medium 5.0)
- [CVE-2008-1278](https://insights.sbomify.com/CVE-2008-1278/): Null dereference in remotelyanywhere:remotelyanywhere (medium 5.0)
- [CVE-2008-1277](https://insights.sbomify.com/CVE-2008-1277/): Null dereference in mailenable:mailenable enterprise (critical 9.0)
- [CVE-2008-1276](https://insights.sbomify.com/CVE-2008-1276/): Memory corruption in mailenable:mailenable enterprise (critical 9.0)
- [CVE-2008-1275](https://insights.sbomify.com/CVE-2008-1275/): Denial of service in mailenable:mailenable enterprise (high 7.8)
- [CVE-2008-1274](https://insights.sbomify.com/CVE-2008-1274/): Other in ibm:aix (medium 6.9)
- [CVE-2008-1273](https://insights.sbomify.com/CVE-2008-1273/): Cross-site scripting in imagevue:imagevue (medium 4.3)
- [CVE-2008-1272](https://insights.sbomify.com/CVE-2008-1272/): SQL injection in bmscripts:bm classifieds (high 7.5)
- [CVE-2008-1270](https://insights.sbomify.com/CVE-2008-1270/): Information disclosure in lighttpd:lighttpd (medium 5.0)
- [CVE-2008-1269](https://insights.sbomify.com/CVE-2008-1269/): Auth bypass in alice:gate2 plus wi-fi (high 7.1)
- [CVE-2008-1268](https://insights.sbomify.com/CVE-2008-1268/): Auth bypass in linksys:wrt54g (critical 10.0)
- [CVE-2008-1267](https://insights.sbomify.com/CVE-2008-1267/): Denial of service in siemens:speedstream 6520 (high 7.8)
- [CVE-2008-1266](https://insights.sbomify.com/CVE-2008-1266/): Memory corruption in dlink:di-524 (high 7.8)
- [CVE-2008-1265](https://insights.sbomify.com/CVE-2008-1265/): Denial of service in linksys:wrt54g (high 7.8)
- [CVE-2008-1264](https://insights.sbomify.com/CVE-2008-1264/): Hardcoded credentials in linksys:wrt54g (high 7.5)
- [CVE-2008-1263](https://insights.sbomify.com/CVE-2008-1263/): Information disclosure in linksys:wrt54g (medium 4.0)
- [CVE-2008-1262](https://insights.sbomify.com/CVE-2008-1262/): Auth bypass in airspan:wimax prost (critical 10.0)
- [CVE-2008-1261](https://insights.sbomify.com/CVE-2008-1261/): Information disclosure in zyxel:p-2602hw-d1a (medium 5.0)
- [CVE-2008-1260](https://insights.sbomify.com/CVE-2008-1260/): Cross-site request forgery in zyxel:p-2602hw-d1a (medium 4.3)
- [CVE-2008-1259](https://insights.sbomify.com/CVE-2008-1259/): Auth bypass in zyxel:p-2602hw-d1a (critical 9.3)
- [CVE-2008-1258](https://insights.sbomify.com/CVE-2008-1258/): Cross-site scripting in d-link:di-604 (medium 4.3)
- [CVE-2008-1257](https://insights.sbomify.com/CVE-2008-1257/): Cross-site scripting in zyxel:p-660hw (medium 4.3)
- [CVE-2008-1256](https://insights.sbomify.com/CVE-2008-1256/): Hardcoded credentials in zyxel:p-660hw (critical 10.0)
- [CVE-2008-1255](https://insights.sbomify.com/CVE-2008-1255/): Auth bypass in zyxel:p-660hw (critical 10.0)
- [CVE-2008-1254](https://insights.sbomify.com/CVE-2008-1254/): Cross-site request forgery in zyxel:p-660hw (medium 6.8)
- [CVE-2008-1253](https://insights.sbomify.com/CVE-2008-1253/): Cross-site scripting in d-link:dsl-g604t (medium 4.3)
- [CVE-2008-1252](https://insights.sbomify.com/CVE-2008-1252/): Information disclosure in deutsche telekom:speedport w500 dsl router (critical 10.0)
- [CVE-2008-1251](https://insights.sbomify.com/CVE-2008-1251/): Cross-site scripting in snom:320 sip phone (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/58/