# Vulnerabilities published in 2008


- [CVE-2008-0330](https://insights.sbomify.com/CVE-2008-0330/): Denial of service in radiator:radius server (high 7.8)
- [CVE-2008-0329](https://insights.sbomify.com/CVE-2008-0329/): Missing authorization in julien plesniak:lulieblog (medium 5.0)
- [CVE-2008-0328](https://insights.sbomify.com/CVE-2008-0328/): SQL injection in fascript:faname (high 7.5)
- [CVE-2008-0327](https://insights.sbomify.com/CVE-2008-0327/): SQL injection in fascript:famp3 (high 7.5)
- [CVE-2008-0326](https://insights.sbomify.com/CVE-2008-0326/): SQL injection in fascript:fapersianhack (high 7.5)
- [CVE-2008-0325](https://insights.sbomify.com/CVE-2008-0325/): SQL injection in fascript:fapersian petition (high 7.5)
- [CVE-2008-0324](https://insights.sbomify.com/CVE-2008-0324/): Memory corruption in cisco:vpn client (medium 4.9)
- [CVE-2008-0322](https://insights.sbomify.com/CVE-2008-0322/): Misconfiguration in microsoft:windows xp (high 7.8)
- [CVE-2008-0320](https://insights.sbomify.com/CVE-2008-0320/): Memory corruption in openoffice:openoffice.org (critical 9.3)
- [CVE-2008-0318](https://insights.sbomify.com/CVE-2008-0318/): Integer overflow in clam anti-virus:clamav (critical 10.0)
- [CVE-2008-0314](https://insights.sbomify.com/CVE-2008-0314/): Memory corruption in clam anti-virus:clamav (high 7.5)
- [CVE-2008-0313](https://insights.sbomify.com/CVE-2008-0313/): Code injection in symantec:norton 360 (medium 6.8)
- [CVE-2008-0312](https://insights.sbomify.com/CVE-2008-0312/): Memory corruption in symantec:norton 360 (critical 9.3)
- [CVE-2008-0311](https://insights.sbomify.com/CVE-2008-0311/): Memory corruption in borland:caliberrm (critical 9.3)
- [CVE-2008-0310](https://insights.sbomify.com/CVE-2008-0310/): Path traversal in sco:unixware (medium 6.9)
- [CVE-2008-0309](https://insights.sbomify.com/CVE-2008-0309/): Memory corruption in symantec:scan engine (medium 6.8)
- [CVE-2008-0308](https://insights.sbomify.com/CVE-2008-0308/): Denial of service in symantec:scan engine (high 7.1)
- [CVE-2008-0307](https://insights.sbomify.com/CVE-2008-0307/): Integer overflow in sap:maxdb (critical 9.3)
- [CVE-2008-0306](https://insights.sbomify.com/CVE-2008-0306/): Privilege escalation in sap:maxdb (medium 6.9)
- [CVE-2008-0304](https://insights.sbomify.com/CVE-2008-0304/): Memory corruption in mozilla:seamonkey (high 7.5)
- [CVE-2008-0303](https://insights.sbomify.com/CVE-2008-0303/): Server-side request forgery in canon:i-sensys (medium 6.4)
- [CVE-2008-0302](https://insights.sbomify.com/CVE-2008-0302/): Code injection in debian:apt-listchanges (high 7.2)
- [CVE-2008-0301](https://insights.sbomify.com/CVE-2008-0301/): SQL injection in mapbender:mapbender (high 7.5)
- [CVE-2008-0300](https://insights.sbomify.com/CVE-2008-0300/): Code injection in mapbender:mapbender (medium 6.8)
- [CVE-2008-0299](https://insights.sbomify.com/CVE-2008-0299/): Paramiko Unsafe randomness usage may allow access to sensitive information (medium 4.3)
- [CVE-2008-0298](https://insights.sbomify.com/CVE-2008-0298/): Denial of service in apple:safari (medium 4.3)
- [CVE-2008-0297](https://insights.sbomify.com/CVE-2008-0297/): Information disclosure in keil software:photokorn (medium 5.0)
- [CVE-2008-0296](https://insights.sbomify.com/CVE-2008-0296/): Memory corruption in videolan:vlc media player (critical 10.0)
- [CVE-2008-0295](https://insights.sbomify.com/CVE-2008-0295/): Memory corruption in videolan:vlc media player (high 8.5)
- [CVE-2008-0294](https://insights.sbomify.com/CVE-2008-0294/): Business logic in freeseat:freeseat (medium 5.0)
- [CVE-2008-0293](https://insights.sbomify.com/CVE-2008-0293/): Auth bypass in freeseat:freeseat (medium 6.8)
- [CVE-2008-0292](https://insights.sbomify.com/CVE-2008-0292/): Cross-site scripting in dansie:photo album (medium 4.3)
- [CVE-2008-0291](https://insights.sbomify.com/CVE-2008-0291/): SQL injection in hangzhou rui-qiang:richstrong cms (high 7.5)
- [CVE-2008-0290](https://insights.sbomify.com/CVE-2008-0290/): SQL injection in digitalhive:digitalhive (high 7.5)
- [CVE-2008-0289](https://insights.sbomify.com/CVE-2008-0289/): Code injection in mansion productions:member area system (medium 6.8)
- [CVE-2008-0288](https://insights.sbomify.com/CVE-2008-0288/): SQL injection in imagealbum:imagealbum (high 7.5)
- [CVE-2008-0287](https://insights.sbomify.com/CVE-2008-0287/): Code injection in visionburst:vcart (medium 6.8)
- [CVE-2008-0286](https://insights.sbomify.com/CVE-2008-0286/): SQL injection in article dashboard:article dashboard (high 7.5)
- [CVE-2008-0285](https://insights.sbomify.com/CVE-2008-0285/): Null dereference in ngircd:ngircd (medium 5.0)
- [CVE-2008-0284](https://insights.sbomify.com/CVE-2008-0284/): Cross-site scripting in simple machines:simple machines smf (medium 4.3)
- [CVE-2008-0283](https://insights.sbomify.com/CVE-2008-0283/): Code injection in domphp:domphp (medium 6.8)
- [CVE-2008-0282](https://insights.sbomify.com/CVE-2008-0282/): SQL injection in domphp:domphp (high 7.5)
- [CVE-2008-0281](https://insights.sbomify.com/CVE-2008-0281/): SQL injection in id-commerce:id-commerce (high 7.5)
- [CVE-2008-0280](https://insights.sbomify.com/CVE-2008-0280/): SQL injection in mtcms:mtcms (high 7.5)
- [CVE-2008-0279](https://insights.sbomify.com/CVE-2008-0279/): SQL injection in xforum:xforum (high 7.5)
- [CVE-2008-0278](https://insights.sbomify.com/CVE-2008-0278/): SQL injection in x7 group:x7 chat (medium 6.0)
- [CVE-2008-0277](https://insights.sbomify.com/CVE-2008-0277/): Code injection in drupal:fileshare module (high 8.5)
- [CVE-2008-0276](https://insights.sbomify.com/CVE-2008-0276/): Cross-site scripting in drupal:drupal (medium 4.3)
- [CVE-2008-0275](https://insights.sbomify.com/CVE-2008-0275/): Missing authorization in drupal:atom module (medium 5.0)
- [CVE-2008-0274](https://insights.sbomify.com/CVE-2008-0274/): Cross-site scripting in drupal:drupal (low 2.6)
- [CVE-2008-0273](https://insights.sbomify.com/CVE-2008-0273/): Cross-site scripting in drupal:drupal (medium 4.3)
- [CVE-2008-0272](https://insights.sbomify.com/CVE-2008-0272/): Cross-site request forgery in drupal:drupal (medium 4.3)
- [CVE-2008-0271](https://insights.sbomify.com/CVE-2008-0271/): Cross-site request forgery in drupal:bueditor (medium 4.3)
- [CVE-2008-0270](https://insights.sbomify.com/CVE-2008-0270/): SQL injection in taskfreak:taskfreak (medium 6.0)
- [CVE-2008-0269](https://insights.sbomify.com/CVE-2008-0269/): Denial of service in sun:sunos (medium 4.9)
- [CVE-2008-0268](https://insights.sbomify.com/CVE-2008-0268/): Cross-site scripting in eticket:eticket (medium 4.3)
- [CVE-2008-0267](https://insights.sbomify.com/CVE-2008-0267/): SQL injection in eticket:eticket (high 7.5)
- [CVE-2008-0266](https://insights.sbomify.com/CVE-2008-0266/): Cross-site request forgery in eticket:eticket (low 2.6)
- [CVE-2008-0265](https://insights.sbomify.com/CVE-2008-0265/): Cross-site scripting in f5:tmos (medium 4.3)
- [CVE-2008-0264](https://insights.sbomify.com/CVE-2008-0264/): Code injection in drupal:meta tags module (medium 6.8)
- [CVE-2008-0263](https://insights.sbomify.com/CVE-2008-0263/): Denial of service in ingate:firewall (medium 5.0)
- [CVE-2008-0262](https://insights.sbomify.com/CVE-2008-0262/): SQL injection in agares media:phpautovideo (high 7.5)
- [CVE-2008-0261](https://insights.sbomify.com/CVE-2008-0261/): Denial of service in mambo:mambo open source (medium 5.0)
- [CVE-2008-0260](https://insights.sbomify.com/CVE-2008-0260/): Information disclosure in minimal design:minimal gallery (medium 5.0)
- [CVE-2008-0259](https://insights.sbomify.com/CVE-2008-0259/): Path traversal in minimal design:minimal gallery (medium 6.4)
- [CVE-2008-0258](https://insights.sbomify.com/CVE-2008-0258/): Cross-site scripting in php running management:phprunman (medium 4.3)
- [CVE-2008-0257](https://insights.sbomify.com/CVE-2008-0257/): Cross-site scripting in dansie:search engine (medium 4.3)
- [CVE-2008-0256](https://insights.sbomify.com/CVE-2008-0256/): SQL injection in matteo binda:asp photo gallery (high 7.5)
- [CVE-2008-0255](https://insights.sbomify.com/CVE-2008-0255/): SQL injection in igamingcms:igaming cms (high 7.5)
- [CVE-2008-0254](https://insights.sbomify.com/CVE-2008-0254/): SQL injection in wavelink media:tutorialcms (medium 6.8)
- [CVE-2008-0253](https://insights.sbomify.com/CVE-2008-0253/): SQL injection in binn:sbuilder (high 7.5)
- [CVE-2008-0252](https://insights.sbomify.com/CVE-2008-0252/): CherryPy Malicious cookies allow access to files outside the session directory (high 7.5)
- [CVE-2008-0251](https://insights.sbomify.com/CVE-2008-0251/): File upload in photopost:photopost vbgallery (critical 10.0)
- [CVE-2008-0250](https://insights.sbomify.com/CVE-2008-0250/): Memory corruption in microsoft:visual interdev (critical 9.3)
- [CVE-2008-0249](https://insights.sbomify.com/CVE-2008-0249/): Information disclosure in phpwebquest:phpwebquest (medium 5.0)
- [CVE-2008-0248](https://insights.sbomify.com/CVE-2008-0248/): Memory corruption in streamaudio:chaincast proxymanager activex control (critical 9.3)
- [CVE-2008-0247](https://insights.sbomify.com/CVE-2008-0247/): Memory corruption in ibm:tivoli storage manager express (critical 10.0)
- [CVE-2008-0246](https://insights.sbomify.com/CVE-2008-0246/): Auth bypass in uploadscript:uploadimage (critical 10.0)
- [CVE-2008-0245](https://insights.sbomify.com/CVE-2008-0245/): Auth bypass in uploadscript:uploadimage (high 7.5)
- [CVE-2008-0244](https://insights.sbomify.com/CVE-2008-0244/): Command injection in sap:maxdb (critical 10.0)
- [CVE-2008-0243](https://insights.sbomify.com/CVE-2008-0243/): Denial of service in ibm:lotus domino (high 7.8)
- [CVE-2008-0242](https://insights.sbomify.com/CVE-2008-0242/): Privilege escalation in sun:solaris (high 7.2)
- [CVE-2008-0241](https://insights.sbomify.com/CVE-2008-0241/): Open redirect in sun:java system identity manager (medium 5.8)
- [CVE-2008-0240](https://insights.sbomify.com/CVE-2008-0240/): Cross-site scripting in sun:java system identity manager (medium 4.3)
- [CVE-2008-0239](https://insights.sbomify.com/CVE-2008-0239/): Cross-site scripting in sun:java system identity manager (medium 4.3)
- [CVE-2008-0238](https://insights.sbomify.com/CVE-2008-0238/): Memory corruption in xine:xine-lib (high 7.5)
- [CVE-2008-0237](https://insights.sbomify.com/CVE-2008-0237/): Command injection in microsoft:rich textbox control (medium 6.8)
- [CVE-2008-0236](https://insights.sbomify.com/CVE-2008-0236/): Command injection in microsoft:visual foxpro (medium 5.8)
- [CVE-2008-0235](https://insights.sbomify.com/CVE-2008-0235/): Code injection in microsoft:vfp ole server activex control (critical 10.0)
- [CVE-2008-0234](https://insights.sbomify.com/CVE-2008-0234/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2008-0233](https://insights.sbomify.com/CVE-2008-0233/): File upload in zero cms:zero cms (high 7.5)
- [CVE-2008-0232](https://insights.sbomify.com/CVE-2008-0232/): SQL injection in zero cms:zero cms (high 7.5)
- [CVE-2008-0231](https://insights.sbomify.com/CVE-2008-0231/): Path traversal in tuned studios:classic theme (high 7.5)
- [CVE-2008-0230](https://insights.sbomify.com/CVE-2008-0230/): Code injection in osdate:osdate (high 7.5)
- [CVE-2008-0229](https://insights.sbomify.com/CVE-2008-0229/): Auth bypass in level one:wbr-3460a (critical 10.0)
- [CVE-2008-0228](https://insights.sbomify.com/CVE-2008-0228/): Cross-site request forgery in linksys:wrt54gl (critical 9.3)
- [CVE-2008-0227](https://insights.sbomify.com/CVE-2008-0227/): Memory corruption in yassl:yassl (high 7.5)
- [CVE-2008-0226](https://insights.sbomify.com/CVE-2008-0226/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2008-0225](https://insights.sbomify.com/CVE-2008-0225/): Memory corruption in xine:xine-lib (medium 6.4)
- [CVE-2008-0224](https://insights.sbomify.com/CVE-2008-0224/): SQL injection in runcms:runcms (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/68/