# Vulnerabilities published in 2008


- [CVE-2008-6510](https://insights.sbomify.com/CVE-2008-6510/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6509](https://insights.sbomify.com/CVE-2008-6509/): SQL injection in n/a (high 7.5)
- [CVE-2008-6508](https://insights.sbomify.com/CVE-2008-6508/): Path traversal in n/a (high 7.5)
- [CVE-2008-6507](https://insights.sbomify.com/CVE-2008-6507/): phpBB vulnerable to sensitive information disclosure (medium 5.0)
- [CVE-2008-6506](https://insights.sbomify.com/CVE-2008-6506/): Auth bypass in n/a (medium 5.0)
- [CVE-2008-6505](https://insights.sbomify.com/CVE-2008-6505/): Apache Struts directory traversal vulnerability (medium 5.0)
- [CVE-2008-6504](https://insights.sbomify.com/CVE-2008-6504/): Improper Input Validation in OpenSymphony XWork (medium 5.0)
- [CVE-2008-6503](https://insights.sbomify.com/CVE-2008-6503/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6502](https://insights.sbomify.com/CVE-2008-6502/): Path traversal in n/a (medium 4.6)
- [CVE-2008-6501](https://insights.sbomify.com/CVE-2008-6501/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6500](https://insights.sbomify.com/CVE-2008-6500/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6499](https://insights.sbomify.com/CVE-2008-6499/): Code injection in n/a (medium 5.5)
- [CVE-2008-6498](https://insights.sbomify.com/CVE-2008-6498/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2008-6497](https://insights.sbomify.com/CVE-2008-6497/): Denial of service in n/a (high 7.8)
- [CVE-2008-6496](https://insights.sbomify.com/CVE-2008-6496/): Path traversal in n/a (high 8.8)
- [CVE-2008-6495](https://insights.sbomify.com/CVE-2008-6495/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6494](https://insights.sbomify.com/CVE-2008-6494/): Information disclosure in n/a (medium 5.0)
- [CVE-2008-6493](https://insights.sbomify.com/CVE-2008-6493/): Information disclosure in n/a (medium 5.0)
- [CVE-2008-6492](https://insights.sbomify.com/CVE-2008-6492/): File upload in n/a (medium 6.8)
- [CVE-2008-6491](https://insights.sbomify.com/CVE-2008-6491/): Code injection in n/a (high 7.5)
- [CVE-2008-6490](https://insights.sbomify.com/CVE-2008-6490/): Path traversal in n/a (high 7.5)
- [CVE-2008-6489](https://insights.sbomify.com/CVE-2008-6489/): SQL injection in n/a (high 7.5)
- [CVE-2008-6488](https://insights.sbomify.com/CVE-2008-6488/): SQL injection in n/a (high 7.5)
- [CVE-2008-6487](https://insights.sbomify.com/CVE-2008-6487/): SQL injection in n/a (high 7.5)
- [CVE-2008-6486](https://insights.sbomify.com/CVE-2008-6486/): Code injection in n/a (medium 6.8)
- [CVE-2008-6485](https://insights.sbomify.com/CVE-2008-6485/): SQL injection in n/a (high 7.5)
- [CVE-2008-6484](https://insights.sbomify.com/CVE-2008-6484/): SQL injection in n/a (high 7.5)
- [CVE-2008-6483](https://insights.sbomify.com/CVE-2008-6483/): Code injection in n/a (high 7.5)
- [CVE-2008-6482](https://insights.sbomify.com/CVE-2008-6482/): Code injection in n/a (medium 6.8)
- [CVE-2008-6481](https://insights.sbomify.com/CVE-2008-6481/): SQL injection in n/a (high 7.5)
- [CVE-2008-6480](https://insights.sbomify.com/CVE-2008-6480/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2008-6479](https://insights.sbomify.com/CVE-2008-6479/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2008-6478](https://insights.sbomify.com/CVE-2008-6478/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2008-6477](https://insights.sbomify.com/CVE-2008-6477/): SQL injection in n/a (high 7.5)
- [CVE-2008-6476](https://insights.sbomify.com/CVE-2008-6476/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6475](https://insights.sbomify.com/CVE-2008-6475/): SQL injection in n/a (high 7.5)
- [CVE-2008-6474](https://insights.sbomify.com/CVE-2008-6474/): Code injection in n/a (critical 9.0)
- [CVE-2008-6473](https://insights.sbomify.com/CVE-2008-6473/): Auth bypass in n/a (medium 6.4)
- [CVE-2008-6472](https://insights.sbomify.com/CVE-2008-6472/): Denial of service in n/a (medium 4.3)
- [CVE-2008-6471](https://insights.sbomify.com/CVE-2008-6471/): SQL injection in n/a (high 7.5)
- [CVE-2008-6470](https://insights.sbomify.com/CVE-2008-6470/): Information disclosure in n/a (medium 5.0)
- [CVE-2008-6469](https://insights.sbomify.com/CVE-2008-6469/): SQL injection in n/a (high 7.5)
- [CVE-2008-6468](https://insights.sbomify.com/CVE-2008-6468/): SQL injection in n/a (high 7.5)
- [CVE-2008-6467](https://insights.sbomify.com/CVE-2008-6467/): SQL injection in n/a (high 7.5)
- [CVE-2008-6466](https://insights.sbomify.com/CVE-2008-6466/): SQL injection in n/a (high 7.5)
- [CVE-2008-6465](https://insights.sbomify.com/CVE-2008-6465/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6464](https://insights.sbomify.com/CVE-2008-6464/): SQL injection in n/a (high 7.5)
- [CVE-2008-6463](https://insights.sbomify.com/CVE-2008-6463/): SQL injection in n/a (high 7.5)
- [CVE-2008-6462](https://insights.sbomify.com/CVE-2008-6462/): SQL injection in n/a (high 7.5)
- [CVE-2008-6461](https://insights.sbomify.com/CVE-2008-6461/): SQL injection in n/a (high 7.5)
- [CVE-2008-6460](https://insights.sbomify.com/CVE-2008-6460/): SQL injection in n/a (high 7.5)
- [CVE-2008-6459](https://insights.sbomify.com/CVE-2008-6459/): SQL injection in n/a (high 7.5)
- [CVE-2008-6458](https://insights.sbomify.com/CVE-2008-6458/): SQL injection in n/a (high 7.5)
- [CVE-2008-6457](https://insights.sbomify.com/CVE-2008-6457/): SQL injection in n/a (high 7.5)
- [CVE-2008-6456](https://insights.sbomify.com/CVE-2008-6456/): SQL injection in n/a (high 7.5)
- [CVE-2008-6455](https://insights.sbomify.com/CVE-2008-6455/): Auth bypass in n/a (medium 6.8)
- [CVE-2008-6454](https://insights.sbomify.com/CVE-2008-6454/): SQL injection in n/a (high 7.5)
- [CVE-2008-6453](https://insights.sbomify.com/CVE-2008-6453/): Path traversal in n/a (medium 4.3)
- [CVE-2008-6452](https://insights.sbomify.com/CVE-2008-6452/): SQL injection in n/a (high 7.5)
- [CVE-2008-6451](https://insights.sbomify.com/CVE-2008-6451/): SQL injection in n/a (high 7.5)
- [CVE-2008-6450](https://insights.sbomify.com/CVE-2008-6450/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6449](https://insights.sbomify.com/CVE-2008-6449/): Cross-site request forgery in n/a (medium 4.0)
- [CVE-2008-6448](https://insights.sbomify.com/CVE-2008-6448/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6447](https://insights.sbomify.com/CVE-2008-6447/): Memory corruption in n/a (critical 9.3)
- [CVE-2008-6446](https://insights.sbomify.com/CVE-2008-6446/): Code injection in n/a (high 7.5)
- [CVE-2008-6445](https://insights.sbomify.com/CVE-2008-6445/): File upload in n/a (high 7.5)
- [CVE-2008-6444](https://insights.sbomify.com/CVE-2008-6444/): Memory corruption in n/a (critical 10.0)
- [CVE-2008-6443](https://insights.sbomify.com/CVE-2008-6443/): SQL injection in n/a (high 7.5)
- [CVE-2008-6442](https://insights.sbomify.com/CVE-2008-6442/): Path traversal in n/a (medium 5.8)
- [CVE-2008-6441](https://insights.sbomify.com/CVE-2008-6441/): Code injection in n/a (critical 9.3)
- [CVE-2008-6440](https://insights.sbomify.com/CVE-2008-6440/): Information disclosure in n/a (medium 5.0)
- [CVE-2008-6439](https://insights.sbomify.com/CVE-2008-6439/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6438](https://insights.sbomify.com/CVE-2008-6438/): SQL injection in n/a (high 7.5)
- [CVE-2008-6437](https://insights.sbomify.com/CVE-2008-6437/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6436](https://insights.sbomify.com/CVE-2008-6436/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6435](https://insights.sbomify.com/CVE-2008-6435/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6434](https://insights.sbomify.com/CVE-2008-6434/): SQL injection in n/a (high 7.5)
- [CVE-2008-6433](https://insights.sbomify.com/CVE-2008-6433/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6431](https://insights.sbomify.com/CVE-2008-6431/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6430](https://insights.sbomify.com/CVE-2008-6430/): SQL injection in n/a (high 7.5)
- [CVE-2008-6429](https://insights.sbomify.com/CVE-2008-6429/): SQL injection in n/a (high 7.5)
- [CVE-2008-6428](https://insights.sbomify.com/CVE-2008-6428/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6427](https://insights.sbomify.com/CVE-2008-6427/): SQL injection in n/a (medium 6.8)
- [CVE-2008-6425](https://insights.sbomify.com/CVE-2008-6425/): SQL injection in n/a (high 7.5)
- [CVE-2008-6424](https://insights.sbomify.com/CVE-2008-6424/): Path traversal in n/a (high 8.8)
- [CVE-2008-6423](https://insights.sbomify.com/CVE-2008-6423/): Path traversal in n/a (medium 5.0)
- [CVE-2008-6422](https://insights.sbomify.com/CVE-2008-6422/): SQL injection in n/a (high 7.5)
- [CVE-2008-6421](https://insights.sbomify.com/CVE-2008-6421/): Code injection in n/a (high 7.5)
- [CVE-2008-6420](https://insights.sbomify.com/CVE-2008-6420/): Path traversal in n/a (medium 5.0)
- [CVE-2008-6419](https://insights.sbomify.com/CVE-2008-6419/): SQL injection in n/a (high 7.5)
- [CVE-2008-6418](https://insights.sbomify.com/CVE-2008-6418/): SQL injection in n/a (high 7.5)
- [CVE-2008-6417](https://insights.sbomify.com/CVE-2008-6417/): Information disclosure in n/a (medium 5.0)
- [CVE-2008-6416](https://insights.sbomify.com/CVE-2008-6416/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6415](https://insights.sbomify.com/CVE-2008-6415/): Memory corruption in n/a (critical 10.0)
- [CVE-2008-6414](https://insights.sbomify.com/CVE-2008-6414/): SQL injection in n/a (high 7.5)
- [CVE-2008-6413](https://insights.sbomify.com/CVE-2008-6413/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2008-6412](https://insights.sbomify.com/CVE-2008-6412/): Privilege escalation in n/a (high 7.5)
- [CVE-2008-6411](https://insights.sbomify.com/CVE-2008-6411/): Auth bypass in n/a (high 7.5)
- [CVE-2008-6410](https://insights.sbomify.com/CVE-2008-6410/): Path traversal in n/a (high 7.5)
- [CVE-2008-6409](https://insights.sbomify.com/CVE-2008-6409/): SQL injection in n/a (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/9/