# CVEs published 2008-07-25

31 CVEs were published on July 25, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3305](https://cve.now/CVE-2008-3305.md): Cross-site scripting (XSS) vulnerability in mensaje.php in C. (no CVSS)
- [CVE-2008-3306](https://cve.now/CVE-2008-3306.md): SQL injection vulnerability in info.php in C. (no CVSS)
- [CVE-2008-3307](https://cve.now/CVE-2008-3307.md): SQL injection vulnerability in todos.php in C. (no CVSS)
- [CVE-2008-3308](https://cve.now/CVE-2008-3308.md): PHP remote file inclusion vulnerability in cuenta/cuerpo.php in C. (no CVSS)
- [CVE-2008-3309](https://cve.now/CVE-2008-3309.md): SQL injection vulnerability in info\_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2008-3310](https://cve.now/CVE-2008-3310.md): SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid… (no CVSS)
- [CVE-2008-3311](https://cve.now/CVE-2008-3311.md): PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2008-3312](https://cve.now/CVE-2008-3312.md): Directory traversal vulnerability in lemon\_includes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 allows remote… (no CVSS)
- [CVE-2008-3313](https://cve.now/CVE-2008-3313.md): Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the… (no CVSS)
- [CVE-2008-3314](https://cve.now/CVE-2008-3314.md): ZDaemon 1.08.07 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted type 6 command, which… (no CVSS)
- [CVE-2008-3315](https://cve.now/CVE-2008-3315.md): Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2008-3316](https://cve.now/CVE-2008-3316.md): Cross-site scripting (XSS) vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to… (no CVSS)
- [CVE-2008-3317](https://cve.now/CVE-2008-3317.md): admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending… (no CVSS)
- [CVE-2008-3318](https://cve.now/CVE-2008-3318.md): admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending… (no CVSS)
- [CVE-2008-3319](https://cve.now/CVE-2008-3319.md): admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending… (no CVSS)
- [CVE-2008-3320](https://cve.now/CVE-2008-3320.md): admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by… (no CVSS)
- [CVE-2008-3321](https://cve.now/CVE-2008-3321.md): admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by… (no CVSS)
- [CVE-2008-3322](https://cve.now/CVE-2008-3322.md): admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending… (no CVSS)
- [CVE-2008-3325](https://cve.now/CVE-2008-3325.md): Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify… (no CVSS)
- [CVE-2008-3326](https://cve.now/CVE-2008-3326.md): Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to… (no CVSS)
- [CVE-2008-3327](https://cve.now/CVE-2008-3327.md): Moodle 1.6.5, when display\_errors is enabled, allows remote attackers to obtain sensitive information via a direct request to (1)… (no CVSS)
- [CVE-2008-3295](https://cve.now/CVE-2008-3295.md): Cross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2008-3296](https://cve.now/CVE-2008-3296.md): Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and execute arbitrary… (no CVSS)
- [CVE-2008-3297](https://cve.now/CVE-2008-3297.md): Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote attackers to execute arbitrary SQL commands via (1)… (no CVSS)
- [CVE-2008-3298](https://cve.now/CVE-2008-3298.md): SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute… (no CVSS)
- [CVE-2008-3299](https://cve.now/CVE-2008-3299.md): eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the admin\_lng cookie value to 1. (no CVSS)
- [CVE-2008-3300](https://cve.now/CVE-2008-3300.md): AlphAdmin CMS 1.0.5/03 allows remote attackers to bypass authentication and gain administrative access by setting the aa\_login cookie… (no CVSS)
- [CVE-2008-3301](https://cve.now/CVE-2008-3301.md): Multiple cross-site scripting (XSS) vulnerabilities in BilboBlog 0.2.1 allow remote authenticated administrators to inject arbitrary web… (no CVSS)
- [CVE-2008-3302](https://cve.now/CVE-2008-3302.md): SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic\_quotes\_gpc is disabled, allows remote authenticated… (no CVSS)
- [CVE-2008-3303](https://cve.now/CVE-2008-3303.md): admin/login.php in BilboBlog 0.2.1, when register\_globals is enabled, allows remote attackers to bypass authentication and obtain… (no CVSS)
- [CVE-2008-3304](https://cve.now/CVE-2008-3304.md): BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an enable\_cache=false query string to footer.php or (2) a… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-07-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.