Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
June

CVEs published in June 2008

435 vulnerabilities, 81 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

chaozzatwork fubarforumDirectory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote...CVE-2008-2887Public exploit6.8 MediumJune 27, 2008
jamroomPHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3...CVE-2008-2886Public exploit9.3 HighJune 27, 2008
odarsPHP remote file inclusion vulnerability in src/browser/resource/categories...CVE-2008-2885Public exploit9.3 HighJune 27, 2008
rss aggregator aggregatorPHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers...CVE-2008-2884Public exploit9.3 HighJune 27, 2008
jamroomPHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0...CVE-2008-2883Public exploit7.5 HighJune 26, 2008
aspindir shibby shopupgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which...CVE-2008-2882Public exploit7.5 HighJune 26, 2008
relative real estate systems real estate systemsRelative Real Estate Systems 3.0 and earlier stores passwords in cleartext in a MySQL database,...CVE-2008-2881Public exploit5.0 MediumJune 26, 2008
ibm afp viewer plug-inHeap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote...CVE-2008-28809.3 HighJune 26, 2008
benjacms benja cmsBenja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers...CVE-2008-28796.4 MediumJune 26, 2008
yektaweb academic web toolsOpen redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4...CVE-2008-2878Public exploit6.4 MediumJune 26, 2008
cmsworksPHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when...CVE-2008-2877Public exploit6.8 MediumJune 26, 2008
munkyDirectory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include...CVE-2008-2876Public exploit7.5 HighJune 26, 2008
webdevindo-cmsSQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to...CVE-2008-2875Public exploit7.5 HighJune 26, 2008
softbizscripts softbiz jokes and funny pics scriptSQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote...CVE-2008-2874Public exploit7.5 HighJune 26, 2008
aspindir shibby shopsHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient...CVE-2008-2873Public exploit5.0 MediumJune 26, 2008
aspindir shibby shopSQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers...CVE-2008-2872Public exploit7.5 HighJune 26, 2008
pegamesMultiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote...CVE-2008-2871Public exploit4.3 MediumJune 26, 2008
sharecmsMultiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute...CVE-2008-2870Public exploit7.5 HighJune 26, 2008
e-topbiz link ads 1SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute...CVE-2008-2869Public exploit7.5 HighJune 26, 2008
duware ducalendarSQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows...CVE-2008-2868Public exploit7.5 HighJune 26, 2008
e-topbiz viral dx 1SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to...CVE-2008-2867Public exploit7.5 HighJune 26, 2008
cisco unified communications managerThe Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications...CVE-2008-27305.0 MediumJune 26, 2008
cisco unified communications managerThe Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications...CVE-2008-20625.0 MediumJune 26, 2008
cisco unified communications managerThe Computer Telephony Integration (CTI) Manager service in Cisco Unified Communications Manager ...CVE-2008-20617.8 HighJune 26, 2008
caupo.net cauposhop classicSQL injection vulnerability in csc_article_details.php in Caupo.net CaupoShop Classic 1.3 allows...CVE-2008-2866Public exploit7.5 HighJune 25, 2008
kalptaru infotech php site lockSQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote...CVE-2008-2865Public exploit7.5 HighJune 25, 2008
elinestudio site composereLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive...CVE-2008-2864Public exploit5.0 MediumJune 25, 2008
elinestudio site composerMultiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow...CVE-2008-2863Public exploit7.5 HighJune 25, 2008
elinestudio site composerMultiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow...CVE-2008-2862Public exploit7.5 HighJune 25, 2008
elinestudio site composerMultiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and...CVE-2008-2861Public exploit4.3 MediumJune 25, 2008
aj square auctionSQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote...CVE-2008-2860Public exploit7.5 HighJune 25, 2008
netwin surgemailUnspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote...CVE-2008-2859Public exploit5.0 MediumJune 25, 2008
webchamadoSQL injection vulnerability in index.php in WebChamado 1.1 allows remote attackers to execute...CVE-2008-2858Public exploit6.8 MediumJune 25, 2008
alstrasoft askmeAlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which...CVE-2008-2857Public exploit5.0 MediumJune 25, 2008
ownrsSQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute...CVE-2008-2856Public exploit7.5 HighJune 25, 2008
ownrsCross-site scripting (XSS) vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to...CVE-2008-2855Public exploit4.3 MediumJune 25, 2008
orlando cms cmsMultiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to...CVE-2008-2854Public exploit7.5 HighJune 25, 2008
easy webstore webstoreSQL injection vulnerability in index.php in Easy Webstore 1.2 allows remote attackers to execute...CVE-2008-2853Public exploit7.5 HighJune 25, 2008
nathan neulinger cgiwrapCross-site scripting (XSS) vulnerability in CGIWrap before 4.1, when an Internet Explorer based...CVE-2008-28524.3 MediumJune 25, 2008
offsystemMultiple buffer overflows in OFF System before 0.19.14 allow remote attackers to have an unknown...CVE-2008-285110.0 HighJune 25, 2008
drupal trailscout moduleSQL injection vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote...CVE-2008-28507.5 HighJune 25, 2008
drupal trailscout moduleCross-site scripting (XSS) vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal...CVE-2008-28493.5 LowJune 25, 2008
mindtouch dekiwikiCross-site scripting (XSS) vulnerability in the search functionality in MindTouch DekiWiki before...CVE-2008-28484.3 MediumJune 25, 2008
softdivision maxtrade aoiSQL injection vulnerability in the Trade module in Maxtrade AIO 1.3.23 allows remote attackers to...CVE-2008-2847Public exploit7.5 HighJune 25, 2008
boatscripts classifiedsSQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to...CVE-2008-2846Public exploit7.5 HighJune 25, 2008
mybizz-classifiedsSQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute...CVE-2008-2845Public exploit7.5 HighJune 25, 2008
carscripts classifiedsSQL injection vulnerability in index.php in Carscripts Classifieds allows remote attackers to...CVE-2008-2844Public exploit7.5 HighJune 25, 2008
doitlive cmsMultiple SQL injection vulnerabilities in doITLive CMS 2.50 and earlier allow remote attackers to...CVE-2008-2843Public exploit7.5 HighJune 25, 2008
doitlive cmsCross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier...CVE-2008-2842Public exploit4.3 MediumJune 25, 2008
adobe acrobat 3d, acrobat reader +1 moreUnspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2,...CVE-2008-2641EPSS 23.8%10.0 HighJune 25, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open