# Vulnerabilities published in 2008


- [CVE-2008-0739](https://insights.sbomify.com/CVE-2008-0739/): SQL injection in shoppingtree:candypress store (high 7.5)
- [CVE-2008-0738](https://insights.sbomify.com/CVE-2008-0738/): SQL injection in shoppingtree:candypress store (high 7.5)
- [CVE-2008-0737](https://insights.sbomify.com/CVE-2008-0737/): SQL injection in shoppingtree:candypress store (high 7.5)
- [CVE-2008-0736](https://insights.sbomify.com/CVE-2008-0736/): Information disclosure in shoppingtree:candypress store (medium 5.0)
- [CVE-2008-0735](https://insights.sbomify.com/CVE-2008-0735/): SQL injection in auracms:auracms (critical 10.0)
- [CVE-2008-0734](https://insights.sbomify.com/CVE-2008-0734/): SQL injection in limbo cms:limbo cms (high 7.5)
- [CVE-2008-0733](https://insights.sbomify.com/CVE-2008-0733/): SQL injection in cs team:counter strike portal (high 7.5)
- [CVE-2008-0732](https://insights.sbomify.com/CVE-2008-0732/): Privilege escalation in apache:geronimo (low 2.1)
- [CVE-2008-0731](https://insights.sbomify.com/CVE-2008-0731/): Security feature bypass in novell:apparmor (high 7.5)
- [CVE-2008-0730](https://insights.sbomify.com/CVE-2008-0730/): Misconfiguration in sun:solaris (medium 4.6)
- [CVE-2008-0729](https://insights.sbomify.com/CVE-2008-0729/): Denial of service in apple:mobile safari (high 7.1)
- [CVE-2008-0728](https://insights.sbomify.com/CVE-2008-0728/): Memory corruption in clamav:clamav (critical 10.0)
- [CVE-2008-0727](https://insights.sbomify.com/CVE-2008-0727/): Memory corruption in ibm:informix dynamic server (high 8.5)
- [CVE-2008-0726](https://insights.sbomify.com/CVE-2008-0726/): Integer overflow in adobe:acrobat (critical 9.3)
- [CVE-2008-0725](https://insights.sbomify.com/CVE-2008-0725/): Memory corruption in titan:ftp server (critical 10.0)
- [CVE-2008-0724](https://insights.sbomify.com/CVE-2008-0724/): Weak cryptography in the everything development company:the everything development engine (medium 5.0)
- [CVE-2008-0723](https://insights.sbomify.com/CVE-2008-0723/): Cross-site scripting in planetluc:mynews (medium 4.3)
- [CVE-2008-0722](https://insights.sbomify.com/CVE-2008-0722/): Cross-site scripting in pagetool:pagetool (medium 4.3)
- [CVE-2008-0721](https://insights.sbomify.com/CVE-2008-0721/): SQL injection in mambo:com sermon (high 7.5)
- [CVE-2008-0720](https://insights.sbomify.com/CVE-2008-0720/): Cross-site scripting in webmin:usermin (medium 4.3)
- [CVE-2008-0719](https://insights.sbomify.com/CVE-2008-0719/): SQL injection in oscommerce:customer testimonials (high 7.5)
- [CVE-2008-0718](https://insights.sbomify.com/CVE-2008-0718/): Denial of service in sun:solaris (medium 4.7)
- [CVE-2008-0717](https://insights.sbomify.com/CVE-2008-0717/): Cross-site scripting in ibm:websphere edge server (medium 4.3)
- [CVE-2008-0716](https://insights.sbomify.com/CVE-2008-0716/): Privilege escalation in symantec:altiris notification server (medium 6.8)
- [CVE-2008-0715](https://insights.sbomify.com/CVE-2008-0715/): Memory corruption in acdsee:photo manager (critical 9.3)
- [CVE-2008-0714](https://insights.sbomify.com/CVE-2008-0714/): SQL injection in mihalism:multi host (medium 6.8)
- [CVE-2008-0713](https://insights.sbomify.com/CVE-2008-0713/): Denial of service in hp:hp-ux (medium 6.8)
- [CVE-2008-0712](https://insights.sbomify.com/CVE-2008-0712/): Other in hp:software update (medium 6.8)
- [CVE-2008-0711](https://insights.sbomify.com/CVE-2008-0711/): Denial of service in hp:bl860c (high 7.8)
- [CVE-2008-0709](https://insights.sbomify.com/CVE-2008-0709/): Privilege escalation in hp:select identity (medium 5.5)
- [CVE-2008-0708](https://insights.sbomify.com/CVE-2008-0708/): Supply chain in hp:442084-b21 (medium 4.6)
- [CVE-2008-0707](https://insights.sbomify.com/CVE-2008-0707/): Privilege escalation in hp:storageworks library and tape tools (high 7.2)
- [CVE-2008-0706](https://insights.sbomify.com/CVE-2008-0706/): Auth bypass in compaq:presario a900 (high 7.2)
- [CVE-2008-0704](https://insights.sbomify.com/CVE-2008-0704/): Other in hp:open vms tcp-ip services (critical 10.0)
- [CVE-2008-0703](https://insights.sbomify.com/CVE-2008-0703/): Path traversal in sflog:sflog (medium 5.0)
- [CVE-2008-0702](https://insights.sbomify.com/CVE-2008-0702/): Memory corruption in south river technologies:titan ftp server (critical 9.3)
- [CVE-2008-0701](https://insights.sbomify.com/CVE-2008-0701/): Missing authorization in magnolia:ce (medium 5.0)
- [CVE-2008-0700](https://insights.sbomify.com/CVE-2008-0700/): Cross-site scripting in crux software:cruxcms (medium 4.3)
- [CVE-2008-0699](https://insights.sbomify.com/CVE-2008-0699/): Other in ibm:db2 (critical 9.0)
- [CVE-2008-0698](https://insights.sbomify.com/CVE-2008-0698/): Memory corruption in ibm:db2 (high 7.8)
- [CVE-2008-0697](https://insights.sbomify.com/CVE-2008-0697/): Privilege escalation in ibm:db2 (high 7.2)
- [CVE-2008-0696](https://insights.sbomify.com/CVE-2008-0696/): Missing authorization in ibm:db2 (high 7.5)
- [CVE-2008-0695](https://insights.sbomify.com/CVE-2008-0695/): SQL injection in bookmarkx:script (high 7.5)
- [CVE-2008-0694](https://insights.sbomify.com/CVE-2008-0694/): Cross-site scripting in ibm:os 400 (medium 4.3)
- [CVE-2008-0693](https://insights.sbomify.com/CVE-2008-0693/): Memory corruption in print manager plus:client billing and authentication (high 7.8)
- [CVE-2008-0692](https://insights.sbomify.com/CVE-2008-0692/): SQL injection in itechscripts:itechbids (high 7.5)
- [CVE-2008-0691](https://insights.sbomify.com/CVE-2008-0691/): Cross-site scripting in simon elvery:wp-footnotes (medium 4.3)
- [CVE-2008-0690](https://insights.sbomify.com/CVE-2008-0690/): SQL injection in joomla:com directory (high 7.5)
- [CVE-2008-0689](https://insights.sbomify.com/CVE-2008-0689/): SQL injection in joomla:com marketplace (high 7.5)
- [CVE-2008-0688](https://insights.sbomify.com/CVE-2008-0688/): Cross-site scripting in smartscript:domain trader (medium 4.3)
- [CVE-2008-0687](https://insights.sbomify.com/CVE-2008-0687/): Cross-site scripting in youtube:clone script (high 7.5)
- [CVE-2008-0686](https://insights.sbomify.com/CVE-2008-0686/): SQL injection in joomla:com neoreferences (high 7.5)
- [CVE-2008-0685](https://insights.sbomify.com/CVE-2008-0685/): SQL injection in itechscripts:itechclassifieds (high 7.5)
- [CVE-2008-0684](https://insights.sbomify.com/CVE-2008-0684/): Cross-site scripting in itechscripts:itechclassifieds (medium 4.3)
- [CVE-2008-0683](https://insights.sbomify.com/CVE-2008-0683/): SQL injection in wordpress:st newsletter plugin (high 7.5)
- [CVE-2008-0682](https://insights.sbomify.com/CVE-2008-0682/): SQL injection in wordpress:wordspew (high 7.5)
- [CVE-2008-0681](https://insights.sbomify.com/CVE-2008-0681/): SQL injection in phpshop:phpshop (medium 6.8)
- [CVE-2008-0680](https://insights.sbomify.com/CVE-2008-0680/): Denial of service in microtik:routeros (high 7.8)
- [CVE-2008-0679](https://insights.sbomify.com/CVE-2008-0679/): Cross-site scripting in blogphp:blogphp (medium 4.3)
- [CVE-2008-0678](https://insights.sbomify.com/CVE-2008-0678/): SQL injection in blogphp:blogphp (medium 6.8)
- [CVE-2008-0677](https://insights.sbomify.com/CVE-2008-0677/): SQL injection in a-blog:a-blog (high 7.5)
- [CVE-2008-0676](https://insights.sbomify.com/CVE-2008-0676/): Cross-site scripting in a-blog:a-blog (medium 4.3)
- [CVE-2008-0675](https://insights.sbomify.com/CVE-2008-0675/): SQL injection in the everything development company:the everything development engine (high 7.5)
- [CVE-2008-0674](https://insights.sbomify.com/CVE-2008-0674/): Memory corruption in pcre:pcre (high 7.5)
- [CVE-2008-0673](https://insights.sbomify.com/CVE-2008-0673/): Other in tintin:tintin\+\+ (high 7.5)
- [CVE-2008-0672](https://insights.sbomify.com/CVE-2008-0672/): Null dereference in tintin:tintin\+\+ (medium 5.0)
- [CVE-2008-0671](https://insights.sbomify.com/CVE-2008-0671/): Memory corruption in tintin:tintin\+\+ (critical 10.0)
- [CVE-2008-0670](https://insights.sbomify.com/CVE-2008-0670/): SQL injection in joomla:com noticias (high 7.5)
- [CVE-2008-0669](https://insights.sbomify.com/CVE-2008-0669/): Cross-site scripting in sift:unity (medium 4.3)
- [CVE-2008-0668](https://insights.sbomify.com/CVE-2008-0668/): Integer overflow in gnome:gnumeric (critical 9.3)
- [CVE-2008-0667](https://insights.sbomify.com/CVE-2008-0667/): Security feature bypass in adobe:acrobat reader (medium 4.3)
- [CVE-2008-0666](https://insights.sbomify.com/CVE-2008-0666/): Race condition in website meta language:website meta language (low 3.6)
- [CVE-2008-0665](https://insights.sbomify.com/CVE-2008-0665/): Race condition in website meta language:website meta language (low 3.6)
- [CVE-2008-0664](https://insights.sbomify.com/CVE-2008-0664/): Missing authorization in wordpress:wordpress (medium 6.4)
- [CVE-2008-0663](https://insights.sbomify.com/CVE-2008-0663/): Security feature bypass in novell:challenge response client (low 2.1)
- [CVE-2008-0662](https://insights.sbomify.com/CVE-2008-0662/): Misconfiguration in checkpoint:vpn-1 secureclient (high 7.8)
- [CVE-2008-0661](https://insights.sbomify.com/CVE-2008-0661/): Memory corruption in illustrate:dbpoweramp audio player (medium 6.8)
- [CVE-2008-0660](https://insights.sbomify.com/CVE-2008-0660/): Memory corruption in aurigma:image uploader activex control (critical 9.3)
- [CVE-2008-0659](https://insights.sbomify.com/CVE-2008-0659/): Memory corruption in aurigma:image uploader activex control (critical 10.0)
- [CVE-2008-0658](https://insights.sbomify.com/CVE-2008-0658/): Denial of service in openldap:openldap (medium 4.0)
- [CVE-2008-0657](https://insights.sbomify.com/CVE-2008-0657/): Privilege escalation in sun:jdk (critical 10.0)
- [CVE-2008-0656](https://insights.sbomify.com/CVE-2008-0656/): File upload in emc:documentum administrator (critical 10.0)
- [CVE-2008-0655](https://insights.sbomify.com/CVE-2008-0655/): Adobe Acrobat and Reader Unspecified (high 8.8, exploited in the wild)
- [CVE-2008-0654](https://insights.sbomify.com/CVE-2008-0654/): Path traversal in azucar cms:azucar cms (high 7.5)
- [CVE-2008-0653](https://insights.sbomify.com/CVE-2008-0653/): SQL injection in joomla:com ynews (high 7.5)
- [CVE-2008-0652](https://insights.sbomify.com/CVE-2008-0652/): SQL injection in joomla:com downloads (high 7.5)
- [CVE-2008-0651](https://insights.sbomify.com/CVE-2008-0651/): SQL injection in pedro santana codice:cms (high 7.5)
- [CVE-2008-0650](https://insights.sbomify.com/CVE-2008-0650/): SQL injection in simple os cms:simple os cms (high 7.5)
- [CVE-2008-0649](https://insights.sbomify.com/CVE-2008-0649/): SQL injection in adp:astanda directory project (high 7.5)
- [CVE-2008-0648](https://insights.sbomify.com/CVE-2008-0648/): Code injection in opensiteadmin:opensiteadmin (medium 6.8)
- [CVE-2008-0647](https://insights.sbomify.com/CVE-2008-0647/): Memory corruption in ourgame.com:glworld (critical 10.0)
- [CVE-2008-0646](https://insights.sbomify.com/CVE-2008-0646/): Denial of service in deluge team:deluge (high 7.8)
- [CVE-2008-0645](https://insights.sbomify.com/CVE-2008-0645/): Code injection in portail web php:portail web php (high 7.5)
- [CVE-2008-0644](https://insights.sbomify.com/CVE-2008-0644/): Cross-site scripting in adobe:coldfusion (medium 5.0)
- [CVE-2008-0643](https://insights.sbomify.com/CVE-2008-0643/): Cross-site scripting in adobe:coldfusion (medium 4.3)
- [CVE-2008-0642](https://insights.sbomify.com/CVE-2008-0642/): Cross-site scripting in adobe:robohelp (medium 6.1)
- [CVE-2008-0640](https://insights.sbomify.com/CVE-2008-0640/): Auth bypass in symantec:ghost solutions suite (critical 10.0)
- [CVE-2008-0639](https://insights.sbomify.com/CVE-2008-0639/): Memory corruption in novell:client (critical 10.0)
- [CVE-2008-0638](https://insights.sbomify.com/CVE-2008-0638/): Memory corruption in symantec:veritas storage foundation (critical 9.3)
- [CVE-2008-0636](https://insights.sbomify.com/CVE-2008-0636/): Information disclosure in level platforms:managed workplace service center (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/64/