# CVEs published 2008-03-05

15 CVEs were published on March 5, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6704](https://cve.now/CVE-2007-6704.md): Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0.1, when pre-logon… (no CVSS)
- [CVE-2008-1162](https://cve.now/CVE-2008-1162.md): SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-1163](https://cve.now/CVE-2008-1163.md): SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2008-1164](https://cve.now/CVE-2008-1164.md): SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the mod\_project\_id… (no CVSS)
- [CVE-2008-1165](https://cve.now/CVE-2008-1165.md): Multiple cross-site scripting (XSS) vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2008-1166](https://cve.now/CVE-2008-1166.md): Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers… (no CVSS)
- [CVE-2008-1167](https://cve.now/CVE-2008-1167.md): Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote… (no CVSS)
- [CVE-2008-1168](https://cve.now/CVE-2008-1168.md): Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2008-1169](https://cve.now/CVE-2008-1169.md): Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read… (no CVSS)
- [CVE-2008-1170](https://cve.now/CVE-2008-1170.md): Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the… (no CVSS)
- [CVE-2008-1171](https://cve.now/CVE-2008-1171.md): Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2008-1096](https://cve.now/CVE-2008-1096.md): The load\_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows… (no CVSS)
- [CVE-2008-1097](https://cve.now/CVE-2008-1097.md): Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2)… (no CVSS)
- [CVE-2008-1098](https://cve.now/CVE-2008-1098.md): Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or… (no CVSS, moin)
- [CVE-2008-1099](https://cve.now/CVE-2008-1099.md): \_macro\_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read… (no CVSS, moin)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-03-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.