2008 CVE Vulnerabilities
7,179 CVEs published in 2008.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2008-4905 | HIGH | 7.5 | 1.5% | Nov 4, 2008 | Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to gu... |
| CVE-2008-4904 | — | — | 0.9% | Nov 4, 2008 | SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenti... |
| CVE-2008-4903 | — | — | 1.1% | Nov 4, 2008 | Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo 5.1.3 and earlier allows remote... |
| CVE-2008-4902 | — | — | 1.0% | Nov 4, 2008 | SQL injection vulnerability in contact_author.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitr... |
| CVE-2008-4901 | — | — | 1.0% | Nov 4, 2008 | SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary... |
| CVE-2008-4900 | — | — | 1.0% | Nov 4, 2008 | SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arb... |
| CVE-2008-4899 | — | — | 0.6% | Nov 4, 2008 | Cross-site request forgery (CSRF) vulnerability in Planetluc RateMe 1.3.3 allows remote attackers to perform unauthorize... |
| CVE-2008-4898 | — | — | 1.0% | Nov 4, 2008 | Cross-site scripting (XSS) vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web scrip... |
| CVE-2008-4897 | — | — | 1.1% | Nov 4, 2008 | SQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when magic_quotes_gpc is disabled, allows... |
| CVE-2008-4896 | — | — | 1.4% | Nov 4, 2008 | Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows remote attackers to inject arb... |
| CVE-2008-4895 | — | — | 1.1% | Nov 4, 2008 | SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL... |
| CVE-2008-4894 | — | — | 2.0% | Nov 4, 2008 | Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10... |
| CVE-2008-4893 | — | — | 1.5% | Nov 4, 2008 | Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS... |
| CVE-2008-4892 | — | — | 1.1% | Nov 4, 2008 | Cross-site scripting (XSS) vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other... |
| CVE-2008-4891 | — | — | 1.1% | Nov 4, 2008 | Cross-site scripting (XSS) vulnerability in signme.inc.php in Planetluc SignMe 1.5 before 1.55 allows remote attackers t... |
| CVE-2008-4913 | — | — | 2.7% | Nov 4, 2008 | Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary ... |
| CVE-2008-4912 | — | — | 1.0% | Nov 4, 2008 | SQL injection vulnerability in popup_img.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute ... |
| CVE-2008-4911 | — | — | 2.3% | Nov 4, 2008 | PHP remote file inclusion vulnerability in read.php in Chattaitaliano Istant-Replay allows remote attackers to execute a... |
| CVE-2008-4910 | — | — | 10.3% | Nov 4, 2008 | The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a f... |
| CVE-2008-4909 | — | — | 1.0% | Nov 4, 2008 | Cross-site request forgery (CSRF) vulnerability in CompactCMS 1.1 and earlier allows remote attackers to perform unautho... |
| CVE-2008-4908 | — | — | 0.3% | Nov 4, 2008 | maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink at... |
| CVE-2008-4890 | — | — | 1.0% | Nov 4, 2008 | SQL injection vulnerability in products.php in 1st News 4 Professional (PR 1) allows remote attackers to execute arbitra... |
| CVE-2008-4889 | — | — | 1.2% | Nov 4, 2008 | SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to exe... |
| CVE-2008-4888 | — | — | 1.7% | Nov 4, 2008 | Cross-site scripting (XSS) vulnerability in error.php in NetRisk 2.0 and earlier allows remote attackers to inject arbit... |
| CVE-2008-4887 | — | — | 1.2% | Nov 4, 2008 | SQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to execute arbitrary SQL com... |
Check if your code is affected by 2008 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now