# Vulnerabilities published in 2008


- [CVE-2008-0223](https://insights.sbomify.com/CVE-2008-0223/): Memory corruption in justsystem:ichitaro (critical 9.3)
- [CVE-2008-0222](https://insights.sbomify.com/CVE-2008-0222/): File upload in wordpress:filemanager (high 7.5)
- [CVE-2008-0221](https://insights.sbomify.com/CVE-2008-0221/): Path traversal in gateway:weblaunch (critical 9.3)
- [CVE-2008-0220](https://insights.sbomify.com/CVE-2008-0220/): Memory corruption in gateway:cweblaunchctl activex control (high 7.5)
- [CVE-2008-0219](https://insights.sbomify.com/CVE-2008-0219/): SQL injection in php webquest:php webquest (high 7.5)
- [CVE-2008-0218](https://insights.sbomify.com/CVE-2008-0218/): Cross-site scripting in merak:icewarp mail server (medium 4.3)
- [CVE-2008-0217](https://insights.sbomify.com/CVE-2008-0217/): Misconfiguration in freebsd:freebsd (medium 6.9)
- [CVE-2008-0216](https://insights.sbomify.com/CVE-2008-0216/): Information disclosure in freebsd:freebsd (low 2.1)
- [CVE-2008-0215](https://insights.sbomify.com/CVE-2008-0215/): Other in hp:storage essentials srm enterprise (critical 10.0)
- [CVE-2008-0214](https://insights.sbomify.com/CVE-2008-0214/): Other in hp:select identity (high 7.5)
- [CVE-2008-0213](https://insights.sbomify.com/CVE-2008-0213/): Code injection in hp:virtual rooms (high 7.5)
- [CVE-2008-0212](https://insights.sbomify.com/CVE-2008-0212/): Memory corruption in hp:openview network node manager (high 7.8)
- [CVE-2008-0211](https://insights.sbomify.com/CVE-2008-0211/): Denial of service in compaq:2210 series bios (medium 4.9)
- [CVE-2008-0210](https://insights.sbomify.com/CVE-2008-0210/): Auth bypass in uebimiau:webmail (medium 6.4)
- [CVE-2008-0209](https://insights.sbomify.com/CVE-2008-0209/): Open redirect in snitz communications:snitz forums 2000 (medium 5.8)
- [CVE-2008-0208](https://insights.sbomify.com/CVE-2008-0208/): Cross-site scripting in snitz communications:snitz forums 2000 (medium 4.3)
- [CVE-2008-0207](https://insights.sbomify.com/CVE-2008-0207/): Cross-site scripting in pro search:pro search (medium 4.3)
- [CVE-2008-0206](https://insights.sbomify.com/CVE-2008-0206/): Cross-site scripting in wordpress:captcha (medium 4.3)
- [CVE-2008-0205](https://insights.sbomify.com/CVE-2008-0205/): Cross-site request forgery in wordpress:math comment spam protection plugin (medium 4.3)
- [CVE-2008-0204](https://insights.sbomify.com/CVE-2008-0204/): Cross-site scripting in wordpress:math comment spam protection plugin (medium 4.3)
- [CVE-2008-0203](https://insights.sbomify.com/CVE-2008-0203/): Cross-site scripting in wordpress:cryptographp (medium 4.3)
- [CVE-2008-0202](https://insights.sbomify.com/CVE-2008-0202/): Other in expressionengine:expressionengine (medium 4.3)
- [CVE-2008-0201](https://insights.sbomify.com/CVE-2008-0201/): Cross-site scripting in expressionengine:expressionengine (medium 4.3)
- [CVE-2008-0200](https://insights.sbomify.com/CVE-2008-0200/): Cross-site scripting in medialand:rotabanner local (medium 4.3)
- [CVE-2008-0199](https://insights.sbomify.com/CVE-2008-0199/): Denial of service in pro search:pro search (medium 5.0)
- [CVE-2008-0198](https://insights.sbomify.com/CVE-2008-0198/): Cross-site request forgery in wp-contactform project:wp-contactform (medium 4.3)
- [CVE-2008-0197](https://insights.sbomify.com/CVE-2008-0197/): Cross-site scripting in wordpress:wp-contactform (medium 4.3)
- [CVE-2008-0196](https://insights.sbomify.com/CVE-2008-0196/): Path traversal in wordpress:wordpress (medium 5.0)
- [CVE-2008-0195](https://insights.sbomify.com/CVE-2008-0195/): Information disclosure in wordpress:wordpress (medium 5.0)
- [CVE-2008-0194](https://insights.sbomify.com/CVE-2008-0194/): Path traversal in wordpress:wordpress (high 7.5)
- [CVE-2008-0193](https://insights.sbomify.com/CVE-2008-0193/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2008-0192](https://insights.sbomify.com/CVE-2008-0192/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2008-0191](https://insights.sbomify.com/CVE-2008-0191/): Information disclosure in wordpress:wordpress (medium 5.0)
- [CVE-2008-0190](https://insights.sbomify.com/CVE-2008-0190/): Cross-site scripting in awesometemplateengine:awesometemplateengine (medium 4.3)
- [CVE-2008-0187](https://insights.sbomify.com/CVE-2008-0187/): SQL injection in spacial audio solutions:samphpweb (high 7.5)
- [CVE-2008-0186](https://insights.sbomify.com/CVE-2008-0186/): Cross-site scripting in phprisk:netrisk (medium 4.3)
- [CVE-2008-0185](https://insights.sbomify.com/CVE-2008-0185/): SQL injection in netrisk:netrisk (high 7.5)
- [CVE-2008-0184](https://insights.sbomify.com/CVE-2008-0184/): Path traversal in prenotazioni on line:syshotel on line system (medium 6.4)
- [CVE-2008-0182](https://insights.sbomify.com/CVE-2008-0182/): Cross-site request forgery in liferay:liferay enterprise portal (medium 4.3)
- [CVE-2008-0181](https://insights.sbomify.com/CVE-2008-0181/): Cross-site scripting in liferay:liferay enterprise portal (medium 4.3)
- [CVE-2008-0180](https://insights.sbomify.com/CVE-2008-0180/): Cross-site scripting in liferay:liferay enterprise portal (medium 4.3)
- [CVE-2008-0179](https://insights.sbomify.com/CVE-2008-0179/): Cross-site scripting in liferay:liferay enterprise portal (low 2.6)
- [CVE-2008-0178](https://insights.sbomify.com/CVE-2008-0178/): Cross-site scripting in liferay:liferay enterprise portal (medium 4.3)
- [CVE-2008-0177](https://insights.sbomify.com/CVE-2008-0177/): Denial of service in kame:ipcomp (high 7.8)
- [CVE-2008-0176](https://insights.sbomify.com/CVE-2008-0176/): Memory corruption in ge fanuc:cimplicity (critical 10.0)
- [CVE-2008-0175](https://insights.sbomify.com/CVE-2008-0175/): File upload in ge fanuc:proficy real-time information portal (high 7.5)
- [CVE-2008-0174](https://insights.sbomify.com/CVE-2008-0174/): Weak cryptography in ge:proficy real-time information portal (critical 9.8)
- [CVE-2008-0173](https://insights.sbomify.com/CVE-2008-0173/): SQL injection in gforge:gforge (high 7.5)
- [CVE-2008-0172](https://insights.sbomify.com/CVE-2008-0172/): Null dereference in boost:boost (medium 5.0)
- [CVE-2008-0171](https://insights.sbomify.com/CVE-2008-0171/): Denial of service in boost:boost (medium 5.0)
- [CVE-2008-0169](https://insights.sbomify.com/CVE-2008-0169/): Auth bypass in ikiwiki:ikiwiki (medium 6.8)
- [CVE-2008-0167](https://insights.sbomify.com/CVE-2008-0167/): Other in gforge:gforge (medium 4.6)
- [CVE-2008-0166](https://insights.sbomify.com/CVE-2008-0166/): Weak cryptography in canonical:ubuntu linux (high 7.5)
- [CVE-2008-0165](https://insights.sbomify.com/CVE-2008-0165/): Cross-site request forgery in ikiwiki:ikiwiki (medium 4.3)
- [CVE-2008-0164](https://insights.sbomify.com/CVE-2008-0164/): Plone Cross-site request forgery (CSRF) (medium 4.3)
- [CVE-2008-0163](https://insights.sbomify.com/CVE-2008-0163/): Path traversal in linux:linux kernel (medium 4.4)
- [CVE-2008-0162](https://insights.sbomify.com/CVE-2008-0162/): Privilege escalation in sam lantinga:splitvt (high 7.2)
- [CVE-2008-0159](https://insights.sbomify.com/CVE-2008-0159/): SQL injection in eggblog:eggblog (medium 6.8)
- [CVE-2008-0158](https://insights.sbomify.com/CVE-2008-0158/): Path traversal in shop-script:shop-script (medium 5.0)
- [CVE-2008-0157](https://insights.sbomify.com/CVE-2008-0157/): SQL injection in flexbb:flexbb (high 7.5)
- [CVE-2008-0156](https://insights.sbomify.com/CVE-2008-0156/): Path traversal in million dollar script:million dollar script (medium 5.0)
- [CVE-2008-0155](https://insights.sbomify.com/CVE-2008-0155/): Cross-site scripting in evilboard:evilboard (medium 4.3)
- [CVE-2008-0154](https://insights.sbomify.com/CVE-2008-0154/): SQL injection in evilboard:evilboard (high 7.5)
- [CVE-2008-0153](https://insights.sbomify.com/CVE-2008-0153/): Null dereference in pragma systems:pragma telnetserver (medium 5.0)
- [CVE-2008-0152](https://insights.sbomify.com/CVE-2008-0152/): Null dereference in seattle lab software:slnet rf telnet server (medium 4.3)
- [CVE-2008-0151](https://insights.sbomify.com/CVE-2008-0151/): Memory corruption in foxitsoftware:wac server (critical 10.0)
- [CVE-2008-0150](https://insights.sbomify.com/CVE-2008-0150/): Auth bypass in aruba networks:aruba mobility controllers (medium 6.8)
- [CVE-2008-0149](https://insights.sbomify.com/CVE-2008-0149/): Information disclosure in tutos:tutos (medium 5.0)
- [CVE-2008-0148](https://insights.sbomify.com/CVE-2008-0148/): Missing authorization in tutos:tutos (critical 10.0)
- [CVE-2008-0147](https://insights.sbomify.com/CVE-2008-0147/): SQL injection in smallnuke:smallnuke (medium 6.8)
- [CVE-2008-0146](https://insights.sbomify.com/CVE-2008-0146/): Cross-site scripting in hughes technologies:w3-msql (medium 4.3)
- [CVE-2008-0145](https://insights.sbomify.com/CVE-2008-0145/): Other in php:php (high 7.5)
- [CVE-2008-0144](https://insights.sbomify.com/CVE-2008-0144/): Code injection in phprisk:netrisk (high 7.5)
- [CVE-2008-0143](https://insights.sbomify.com/CVE-2008-0143/): Code injection in spacial audio solutions:sam broadcaster (high 7.5)
- [CVE-2008-0142](https://insights.sbomify.com/CVE-2008-0142/): SQL injection in webportal:webportal cms (medium 6.8)
- [CVE-2008-0141](https://insights.sbomify.com/CVE-2008-0141/): Weak cryptography in webportal cms project:webportal cms (high 7.5)
- [CVE-2008-0140](https://insights.sbomify.com/CVE-2008-0140/): Path traversal in uebimiau:webmail (medium 6.4)
- [CVE-2008-0139](https://insights.sbomify.com/CVE-2008-0139/): Code injection in loudblog:loudblog (medium 6.8)
- [CVE-2008-0138](https://insights.sbomify.com/CVE-2008-0138/): Code injection in xoops:xoopsgallery module (medium 6.8)
- [CVE-2008-0137](https://insights.sbomify.com/CVE-2008-0137/): Code injection in snetworks:php classifieds (high 7.5)
- [CVE-2008-0136](https://insights.sbomify.com/CVE-2008-0136/): Information disclosure in snitz communications:snitz forums 2000 (medium 5.0)
- [CVE-2008-0135](https://insights.sbomify.com/CVE-2008-0135/): Information disclosure in snitz communications:snitz forums 2000 (medium 5.0)
- [CVE-2008-0134](https://insights.sbomify.com/CVE-2008-0134/): Cross-site scripting in snitz communications:snitz forums 2000 (medium 4.3)
- [CVE-2008-0133](https://insights.sbomify.com/CVE-2008-0133/): SQL injection in thomas perez:tribisur (high 7.5)
- [CVE-2008-0132](https://insights.sbomify.com/CVE-2008-0132/): Denial of service in pragmasys:fortress ssh (medium 5.0)
- [CVE-2008-0131](https://insights.sbomify.com/CVE-2008-0131/): Cross-site scripting in instantsoftwares:dating site (medium 4.3)
- [CVE-2008-0130](https://insights.sbomify.com/CVE-2008-0130/): SQL injection in instantsoftwares:dating site (high 7.5)
- [CVE-2008-0129](https://insights.sbomify.com/CVE-2008-0129/): SQL injection in siteatschool:siteatschool (medium 6.8)
- [CVE-2008-0128](https://insights.sbomify.com/CVE-2008-0128/): Misconfiguration in apache:tomcat (medium 5.0)
- [CVE-2008-0127](https://insights.sbomify.com/CVE-2008-0127/): Memory corruption in mcafee:e-business server (high 8.8)
- [CVE-2008-0125](https://insights.sbomify.com/CVE-2008-0125/): Cross-site scripting in phpstats:phpstats (medium 4.3)
- [CVE-2008-0124](https://insights.sbomify.com/CVE-2008-0124/): Cross-site scripting in s9y:serendipity (medium 4.3)
- [CVE-2008-0123](https://insights.sbomify.com/CVE-2008-0123/): Cross-site scripting in moodle:moodle (medium 4.3)
- [CVE-2008-0122](https://insights.sbomify.com/CVE-2008-0122/): Memory corruption in isc:bind (critical 10.0)
- [CVE-2008-0121](https://insights.sbomify.com/CVE-2008-0121/): Memory corruption in microsoft:office powerpoint viewer (critical 9.3)
- [CVE-2008-0120](https://insights.sbomify.com/CVE-2008-0120/): Integer overflow in microsoft:office powerpoint viewer (critical 9.3)
- [CVE-2008-0119](https://insights.sbomify.com/CVE-2008-0119/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2008-0118](https://insights.sbomify.com/CVE-2008-0118/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2008-0117](https://insights.sbomify.com/CVE-2008-0117/): Memory corruption in microsoft:compatibility pack word excel powerpoint 2007 (critical 9.3)
- [CVE-2008-0116](https://insights.sbomify.com/CVE-2008-0116/): Code injection in microsoft:excel (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/69/