# Vulnerabilities published in 2008


- [CVE-2008-0942](https://insights.sbomify.com/CVE-2008-0942/): SQL injection in aeries:aeries student information system (high 7.5)
- [CVE-2008-0941](https://insights.sbomify.com/CVE-2008-0941/): Cross-site scripting in aeries:aeries student information system (medium 4.3)
- [CVE-2008-0940](https://insights.sbomify.com/CVE-2008-0940/): Cross-site scripting in webgui:webgui (medium 4.3)
- [CVE-2008-0939](https://insights.sbomify.com/CVE-2008-0939/): SQL injection in wordpress:photo album plugin (high 7.5)
- [CVE-2008-0938](https://insights.sbomify.com/CVE-2008-0938/): Information disclosure in sun:solaris (medium 4.7)
- [CVE-2008-0937](https://insights.sbomify.com/CVE-2008-0937/): SQL injection in tinyevent:tinyevent (medium 6.8)
- [CVE-2008-0936](https://insights.sbomify.com/CVE-2008-0936/): SQL injection in xoops:prayer list module (high 7.5)
- [CVE-2008-0935](https://insights.sbomify.com/CVE-2008-0935/): Memory corruption in novell:iprint (critical 10.0)
- [CVE-2008-0934](https://insights.sbomify.com/CVE-2008-0934/): SQL injection in nukec:nukec (high 7.5)
- [CVE-2008-0933](https://insights.sbomify.com/CVE-2008-0933/): Race condition in sun:solaris (medium 4.7)
- [CVE-2008-0932](https://insights.sbomify.com/CVE-2008-0932/): Command injection in the sword project:diatheke front end (high 7.5)
- [CVE-2008-0931](https://insights.sbomify.com/CVE-2008-0931/): Misconfiguration in xwine:xwine (medium 6.3)
- [CVE-2008-0930](https://insights.sbomify.com/CVE-2008-0930/): Race condition in freshmeat:xwine (high 7.2)
- [CVE-2008-0928](https://insights.sbomify.com/CVE-2008-0928/): Memory corruption in qemu:qemu (medium 4.7)
- [CVE-2008-0927](https://insights.sbomify.com/CVE-2008-0927/): Denial of service in microsoft:windows-nt (medium 5.0)
- [CVE-2008-0926](https://insights.sbomify.com/CVE-2008-0926/): Auth bypass in novell:edirectory (high 7.5)
- [CVE-2008-0925](https://insights.sbomify.com/CVE-2008-0925/): Cross-site scripting in novell:edirectory (medium 4.3)
- [CVE-2008-0924](https://insights.sbomify.com/CVE-2008-0924/): Memory corruption in novell:edirectory (medium 6.8)
- [CVE-2008-0923](https://insights.sbomify.com/CVE-2008-0923/): Path traversal in vmware:ace (medium 6.9)
- [CVE-2008-0922](https://insights.sbomify.com/CVE-2008-0922/): SQL injection in php-nuke:manuales (high 7.5)
- [CVE-2008-0921](https://insights.sbomify.com/CVE-2008-0921/): SQL injection in becontent:becontent (high 7.5)
- [CVE-2008-0920](https://insights.sbomify.com/CVE-2008-0920/): SQL injection in open source security information management:os-sim (medium 6.5)
- [CVE-2008-0919](https://insights.sbomify.com/CVE-2008-0919/): Cross-site scripting in open source security information management:os-sim (medium 4.3)
- [CVE-2008-0918](https://insights.sbomify.com/CVE-2008-0918/): SQL injection in astats:astatspro (high 7.5)
- [CVE-2008-0917](https://insights.sbomify.com/CVE-2008-0917/): Cross-site scripting in tor world:com vote (medium 4.3)
- [CVE-2008-0916](https://insights.sbomify.com/CVE-2008-0916/): SQL injection in highwood design:hwdvideoshare (high 7.5)
- [CVE-2008-0915](https://insights.sbomify.com/CVE-2008-0915/): Security feature bypass in ipdiva:ipdiva (medium 6.4)
- [CVE-2008-0914](https://insights.sbomify.com/CVE-2008-0914/): Cross-site scripting in ipdiva:ipdiva (medium 4.3)
- [CVE-2008-0913](https://insights.sbomify.com/CVE-2008-0913/): Cross-site scripting in invision power services:invision power board (medium 4.3)
- [CVE-2008-0912](https://insights.sbomify.com/CVE-2008-0912/): Memory corruption in sybase:mobilink (critical 10.0)
- [CVE-2008-0911](https://insights.sbomify.com/CVE-2008-0911/): SQL injection in iscripts:multicart (medium 6.5)
- [CVE-2008-0910](https://insights.sbomify.com/CVE-2008-0910/): Security feature bypass in f-secure:f-secure anti-virus (high 7.5)
- [CVE-2008-0909](https://insights.sbomify.com/CVE-2008-0909/): Cross-site scripting in schoolwires:academic portal (medium 4.3)
- [CVE-2008-0908](https://insights.sbomify.com/CVE-2008-0908/): SQL injection in schoolwires:academic portal (high 7.5)
- [CVE-2008-0907](https://insights.sbomify.com/CVE-2008-0907/): SQL injection in php-nuke:inhalt module (high 7.5)
- [CVE-2008-0906](https://insights.sbomify.com/CVE-2008-0906/): SQL injection in php-nuke:php-nuke module docum (high 7.5)
- [CVE-2008-0905](https://insights.sbomify.com/CVE-2008-0905/): Path traversal in meo:globsy (medium 5.0)
- [CVE-2008-0904](https://insights.sbomify.com/CVE-2008-0904/): Path traversal in bea systems:aqualogic interaction (high 7.8)
- [CVE-2008-0903](https://insights.sbomify.com/CVE-2008-0903/): Denial of service in bea systems:weblogic express (medium 4.3)
- [CVE-2008-0902](https://insights.sbomify.com/CVE-2008-0902/): Cross-site scripting in bea:weblogic server (medium 4.3)
- [CVE-2008-0901](https://insights.sbomify.com/CVE-2008-0901/): Information disclosure in bea:weblogic server (high 7.1)
- [CVE-2008-0900](https://insights.sbomify.com/CVE-2008-0900/): Auth bypass in bea:weblogic server (medium 6.0)
- [CVE-2008-0899](https://insights.sbomify.com/CVE-2008-0899/): Cross-site scripting in bea:weblogic server (medium 4.3)
- [CVE-2008-0898](https://insights.sbomify.com/CVE-2008-0898/): Security feature bypass in bea:weblogic server (medium 5.8)
- [CVE-2008-0897](https://insights.sbomify.com/CVE-2008-0897/): Missing authorization in bea:weblogic server (high 7.9)
- [CVE-2008-0896](https://insights.sbomify.com/CVE-2008-0896/): Missing authorization in bea systems:weblogic portal (medium 4.9)
- [CVE-2008-0895](https://insights.sbomify.com/CVE-2008-0895/): Auth bypass in bea:weblogic server (medium 6.4)
- [CVE-2008-0894](https://insights.sbomify.com/CVE-2008-0894/): Information disclosure in apple:safari (medium 6.8)
- [CVE-2008-0893](https://insights.sbomify.com/CVE-2008-0893/): Missing authorization in redhat:directory server (high 7.5)
- [CVE-2008-0892](https://insights.sbomify.com/CVE-2008-0892/): Command injection in redhat:directory server (critical 9.0)
- [CVE-2008-0891](https://insights.sbomify.com/CVE-2008-0891/): Memory corruption in openssl:openssl (medium 4.3)
- [CVE-2008-0890](https://insights.sbomify.com/CVE-2008-0890/): Misconfiguration in redhat:directory server (medium 4.6)
- [CVE-2008-0889](https://insights.sbomify.com/CVE-2008-0889/): Misconfiguration in redhat:directory server (low 2.1)
- [CVE-2008-0888](https://insights.sbomify.com/CVE-2008-0888/): Memory corruption in unzip (critical 9.3)
- [CVE-2008-0887](https://insights.sbomify.com/CVE-2008-0887/): Denial of service in gnome:screensaver (medium 4.7)
- [CVE-2008-0884](https://insights.sbomify.com/CVE-2008-0884/): Misconfiguration in redhat:enterprise linux (medium 6.9)
- [CVE-2008-0883](https://insights.sbomify.com/CVE-2008-0883/): Race condition in adobe:acrobat reader (low 3.7)
- [CVE-2008-0882](https://insights.sbomify.com/CVE-2008-0882/): Memory corruption in cups:cups (critical 10.0)
- [CVE-2008-0881](https://insights.sbomify.com/CVE-2008-0881/): SQL injection in phpnuke:okul module (high 7.5)
- [CVE-2008-0880](https://insights.sbomify.com/CVE-2008-0880/): SQL injection in phpnuke:easycontent module (high 7.5)
- [CVE-2008-0879](https://insights.sbomify.com/CVE-2008-0879/): SQL injection in phpnuke:web links module (high 7.5)
- [CVE-2008-0878](https://insights.sbomify.com/CVE-2008-0878/): SQL injection in runcms:myannonces (high 7.5)
- [CVE-2008-0877](https://insights.sbomify.com/CVE-2008-0877/): Cross-site scripting in jinzora:media jukebox (medium 4.3)
- [CVE-2008-0876](https://insights.sbomify.com/CVE-2008-0876/): Denial of service in hitachi:sewb3 mi-platform (medium 4.3)
- [CVE-2008-0875](https://insights.sbomify.com/CVE-2008-0875/): Denial of service in hitachi:eur print manager (medium 5.0)
- [CVE-2008-0874](https://insights.sbomify.com/CVE-2008-0874/): SQL injection in xoops:eempregos module (high 7.5)
- [CVE-2008-0873](https://insights.sbomify.com/CVE-2008-0873/): SQL injection in jlmzone:classifieds (high 7.5)
- [CVE-2008-0872](https://insights.sbomify.com/CVE-2008-0872/): Cross-site scripting in smartertools:smartermail enterprise (medium 4.3)
- [CVE-2008-0871](https://insights.sbomify.com/CVE-2008-0871/): Memory corruption in now:sms mms gateway (medium 6.8)
- [CVE-2008-0870](https://insights.sbomify.com/CVE-2008-0870/): Open redirect in bea systems:weblogic portal (high 7.5)
- [CVE-2008-0869](https://insights.sbomify.com/CVE-2008-0869/): Cross-site scripting in bea:weblogic server (medium 4.3)
- [CVE-2008-0868](https://insights.sbomify.com/CVE-2008-0868/): Cross-site scripting in bea systems:weblogic portal (medium 4.3)
- [CVE-2008-0867](https://insights.sbomify.com/CVE-2008-0867/): Cross-site scripting in bea systems:aqualogic interaction (medium 4.3)
- [CVE-2008-0866](https://insights.sbomify.com/CVE-2008-0866/): Cross-site scripting in bea:weblogic workshop (medium 4.3)
- [CVE-2008-0865](https://insights.sbomify.com/CVE-2008-0865/): Security feature bypass in bea systems:weblogic portal (medium 5.0)
- [CVE-2008-0864](https://insights.sbomify.com/CVE-2008-0864/): Missing authorization in bea systems:weblogic portal (medium 5.0)
- [CVE-2008-0863](https://insights.sbomify.com/CVE-2008-0863/): Information disclosure in bea:weblogic server (medium 5.0)
- [CVE-2008-0862](https://insights.sbomify.com/CVE-2008-0862/): Security feature bypass in ibm:lotus notes (medium 4.3)
- [CVE-2008-0861](https://insights.sbomify.com/CVE-2008-0861/): Cross-site scripting in ibm:lotus quickplace (medium 4.3)
- [CVE-2008-0860](https://insights.sbomify.com/CVE-2008-0860/): Misconfiguration in kerio:avg plugin (critical 10.0)
- [CVE-2008-0859](https://insights.sbomify.com/CVE-2008-0859/): Memory corruption in kerio:kerio mailserver (medium 5.0)
- [CVE-2008-0858](https://insights.sbomify.com/CVE-2008-0858/): Memory corruption in kerio:kerio mailserver (high 7.5)
- [CVE-2008-0857](https://insights.sbomify.com/CVE-2008-0857/): SQL injection in woltlab:burning board (high 7.5)
- [CVE-2008-0856](https://insights.sbomify.com/CVE-2008-0856/): SQL injection in e-vision:e-vision cms (high 7.5)
- [CVE-2008-0855](https://insights.sbomify.com/CVE-2008-0855/): SQL injection in joomla:com facileforms (high 7.5)
- [CVE-2008-0854](https://insights.sbomify.com/CVE-2008-0854/): SQL injection in joomla:com salesrep (high 7.5)
- [CVE-2008-0853](https://insights.sbomify.com/CVE-2008-0853/): SQL injection in joomla:com detail (high 7.5)
- [CVE-2008-0852](https://insights.sbomify.com/CVE-2008-0852/): Null dereference in freesshd:freesshd (medium 5.0)
- [CVE-2008-0851](https://insights.sbomify.com/CVE-2008-0851/): Cross-site scripting in dokeos:e-learning system (medium 4.3)
- [CVE-2008-0850](https://insights.sbomify.com/CVE-2008-0850/): SQL injection in dokeos:dokeos (high 7.5)
- [CVE-2008-0849](https://insights.sbomify.com/CVE-2008-0849/): SQL injection in joomla:com downloads (high 7.5)
- [CVE-2008-0848](https://insights.sbomify.com/CVE-2008-0848/): Cross-site scripting in crafty syntax live help:crafty syntax live help (medium 4.3)
- [CVE-2008-0847](https://insights.sbomify.com/CVE-2008-0847/): SQL injection in xoops:mytopics (high 7.5)
- [CVE-2008-0846](https://insights.sbomify.com/CVE-2008-0846/): SQL injection in joomla:com profile (high 7.5)
- [CVE-2008-0845](https://insights.sbomify.com/CVE-2008-0845/): SQL injection in wordpress:dean logan wp-people plugin (high 7.5)
- [CVE-2008-0844](https://insights.sbomify.com/CVE-2008-0844/): SQL injection in joomla:com pccookbook (high 7.5)
- [CVE-2008-0843](https://insights.sbomify.com/CVE-2008-0843/): Missing authorization in statcountex:statcountex (medium 6.4)
- [CVE-2008-0842](https://insights.sbomify.com/CVE-2008-0842/): SQL injection in joomla:com clasifier (high 7.5)
- [CVE-2008-0841](https://insights.sbomify.com/CVE-2008-0841/): SQL injection in joomla:com ricette component (high 7.5)
- [CVE-2008-0840](https://insights.sbomify.com/CVE-2008-0840/): Path traversal in publicwarehouse:lightblog (medium 4.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/62/