2008 CVE Vulnerabilities

7,179 CVEs published in 2008.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2008-4372——Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject...
CVE-2008-4371——SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary S...
CVE-2008-4370——Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrar...
CVE-2008-4369——SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL comm...
CVE-2008-4368——The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Jav...
CVE-2008-4366——Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated ...
CVE-2008-4365——Cross-site scripting (XSS) vulnerability in search.php in Siteman 1.1.11 and earlier allows remote attackers to inject a...
CVE-2008-4364——SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL...
CVE-2008-4363——DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially exe...
CVE-2008-4362——The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (syst...
CVE-2008-4361——Directory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and possibly read arbitrary file...
CVE-2008-4358——Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and atta...
CVE-2008-4357——SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands ...
CVE-2008-4356——Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL c...
CVE-2008-4355——SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows r...
CVE-2008-4354——SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbi...
CVE-2008-4353——SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary SQL commands via the c...
CVE-2008-4352——SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary...
CVE-2008-4351——Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitra...
CVE-2008-4350——SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute ar...
CVE-2008-4349——Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject a...
CVE-2008-4348——SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL ...
CVE-2008-4347——SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands...
CVE-2008-4346——Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary...
CVE-2008-4345——SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitr...

Check if your code is affected by 2008 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now