# CVEs published 2008-01-24

14 CVEs were published on January 24, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6415](https://cve.now/CVE-2007-6415.md): scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute arbitrary code by invoking scp, as… (no CVSS)
- [CVE-2008-0441](https://cve.now/CVE-2008-0441.md): IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext (1) after external authentication, which triggers writing… (no CVSS)
- [CVE-2008-0442](https://cve.now/CVE-2008-0442.md): PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2008-0443](https://cve.now/CVE-2008-0443.md): Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module… (no CVSS)
- [CVE-2008-0444](https://cve.now/CVE-2008-0444.md): Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2008-0445](https://cve.now/CVE-2008-0445.md): The replace\_inline\_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2008-0446](https://cve.now/CVE-2008-0446.md): SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2008-0447](https://cve.now/CVE-2008-0447.md): SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-0448](https://cve.now/CVE-2008-0448.md): PHP remote file inclusion vulnerability in utils/class\_HTTPRetriever.php in phpSearch allows remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2008-0449](https://cve.now/CVE-2008-0449.md): SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-0450](https://cve.now/CVE-2008-0450.md): Multiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c allow remote attackers to execute arbitrary PHP code via a URL in… (no CVSS)
- [CVE-2008-0451](https://cve.now/CVE-2008-0451.md): Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id… (no CVSS)
- [CVE-2008-0452](https://cve.now/CVE-2008-0452.md): Directory traversal vulnerability in articles.php in Siteman 1.1.9 allows remote attackers to read arbitrary files via directory traversal… (no CVSS)
- [CVE-2008-0453](https://cve.now/CVE-2008-0453.md): SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-01-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.