2008 CVE Vulnerabilities
7,179 CVEs published in 2008.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2008-3102 | — | — | 1.9% | Sep 24, 2008 | Mantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session cookie in an https ses... |
| CVE-2008-4153 | — | — | 1.3% | Sep 24, 2008 | The Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform access checks for a nod... |
| CVE-2008-4152 | — | — | 0.9% | Sep 24, 2008 | Cross-site scripting (XSS) vulnerability in the Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drup... |
| CVE-2008-4151 | — | — | 2.9% | Sep 24, 2008 | Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. (... |
| CVE-2008-4150 | — | — | 1.0% | Sep 24, 2008 | SQL injection vulnerability in picture_category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL... |
| CVE-2008-4149 | — | — | 1.2% | Sep 24, 2008 | Cross-site scripting (XSS) vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows rem... |
| CVE-2008-4148 | — | — | 1.1% | Sep 24, 2008 | SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, al... |
| CVE-2008-4147 | — | — | 1.1% | Sep 24, 2008 | Cross-site scripting (XSS) vulnerability in the Mailsave module 5.x before 5.x-3.3 and 6.x before 6.x-1.3, a module for ... |
| CVE-2008-4146 | — | — | 2.2% | Sep 24, 2008 | Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a modified approved field ... |
| CVE-2008-4145 | — | — | 0.9% | Sep 24, 2008 | SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier, when magic_quotes_gpc is disabled... |
| CVE-2008-4144 | — | — | 1.0% | Sep 24, 2008 | SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitra... |
| CVE-2008-4143 | — | — | 1.1% | Sep 24, 2008 | SQL injection vulnerability in category_search.php in RazorCommerce Shopping Cart allows remote attackers to execute arb... |
| CVE-2008-4142 | — | — | 1.2% | Sep 24, 2008 | SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via th... |
| CVE-2008-4141 | — | — | 3.0% | Sep 24, 2008 | Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to ... |
| CVE-2008-4140 | — | — | 1.5% | Sep 24, 2008 | Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web ... |
| CVE-2008-4139 | — | — | 1.5% | Sep 24, 2008 | Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inje... |
| CVE-2008-4138 | — | — | 10.3% | Sep 24, 2008 | PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows r... |
| CVE-2008-4137 | — | — | 2.5% | Sep 24, 2008 | PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PH... |
| CVE-2008-4136 | — | — | 3.2% | Sep 24, 2008 | Michael Roth Software Personal FTP Server (PFT) 6.0f allows remote attackers to cause a denial of service (service crash... |
| CVE-2008-4189 | — | — | — | Sep 23, 2008 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-1105. Reason: This candidate is a duplicate of... |
| CVE-2008-4188 | — | — | 4.1% | Sep 23, 2008 | Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to ex... |
| CVE-2008-4187 | — | — | 2.3% | Sep 23, 2008 | Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a ..... |
| CVE-2008-4186 | — | — | 0.9% | Sep 23, 2008 | SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL comma... |
| CVE-2008-4185 | — | — | 1.2% | Sep 23, 2008 | SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL comma... |
| CVE-2008-4184 | — | — | 1.0% | Sep 23, 2008 | Cross-site scripting (XSS) vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitra... |
Check if your code is affected by 2008 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now