# CVEs published 2008-06-26

20 CVEs were published on June 26, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2061](https://cve.now/CVE-2008-2061.md): The Computer Telephony Integration (CTI) Manager service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3c) and 6.x before… (no CVSS)
- [CVE-2008-2062](https://cve.now/CVE-2008-2062.md): The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3… (no CVSS)
- [CVE-2008-2730](https://cve.now/CVE-2008-2730.md): The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x… (no CVSS)
- [CVE-2008-2867](https://cve.now/CVE-2008-2867.md): SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-2868](https://cve.now/CVE-2008-2868.md): SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-2869](https://cve.now/CVE-2008-2869.md): SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands via the linkid… (no CVSS)
- [CVE-2008-2870](https://cve.now/CVE-2008-2870.md): Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the (1) eventID… (no CVSS)
- [CVE-2008-2871](https://cve.now/CVE-2008-2871.md): Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2008-2872](https://cve.now/CVE-2008-2872.md): SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2008-2873](https://cve.now/CVE-2008-2873.md): sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote… (no CVSS)
- [CVE-2008-2874](https://cve.now/CVE-2008-2874.md): SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2008-2875](https://cve.now/CVE-2008-2875.md): SQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to execute arbitrary SQL commands via the hal… (no CVSS)
- [CVE-2008-2876](https://cve.now/CVE-2008-2876.md): Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (no CVSS)
- [CVE-2008-2877](https://cve.now/CVE-2008-2877.md): PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when register\_globals is enabled, allows… (no CVSS)
- [CVE-2008-2878](https://cve.now/CVE-2008-2878.md): Open redirect vulnerability in rss\_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers… (no CVSS)
- [CVE-2008-2879](https://cve.now/CVE-2008-2879.md): Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu. (no CVSS)
- [CVE-2008-2880](https://cve.now/CVE-2008-2880.md): Heap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote attackers to execute arbitrary code via a long… (no CVSS)
- [CVE-2008-2881](https://cve.now/CVE-2008-2881.md): Relative Real Estate Systems 3.0 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers… (no CVSS)
- [CVE-2008-2882](https://cve.now/CVE-2008-2882.md): upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file… (no CVSS)
- [CVE-2008-2883](https://cve.now/CVE-2008-2883.md): PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-06-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.