# CVEs published 2008-01-24

14 CVEs were published on January 24, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6415](https://cve.now/CVE-2007-6415.md): scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute arbitrary code by invoking scp, as imp (no CVSS)
- [CVE-2008-0441](https://cve.now/CVE-2008-0441.md): IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext (1) after external authentication, which triggers writing the (no CVSS)
- [CVE-2008-0442](https://cve.now/CVE-2008-0442.md): PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2008-0443](https://cve.now/CVE-2008-0443.md): Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows (no CVSS)
- [CVE-2008-0444](https://cve.now/CVE-2008-0444.md): Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-0445](https://cve.now/CVE-2008-0445.md): The replace\_inline\_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (inf (no CVSS)
- [CVE-2008-0446](https://cve.now/CVE-2008-0446.md): SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2008-0447](https://cve.now/CVE-2008-0447.md): SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL commands via the stor (no CVSS)
- [CVE-2008-0448](https://cve.now/CVE-2008-0448.md): PHP remote file inclusion vulnerability in utils/class\_HTTPRetriever.php in phpSearch allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2008-0449](https://cve.now/CVE-2008-0449.md): SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2008-0450](https://cve.now/CVE-2008-0450.md): Multiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2008-0451](https://cve.now/CVE-2008-0451.md): Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id paramet (no CVSS)
- [CVE-2008-0452](https://cve.now/CVE-2008-0452.md): Directory traversal vulnerability in articles.php in Siteman 1.1.9 allows remote attackers to read arbitrary files via directory traversal s (no CVSS)
- [CVE-2008-0453](https://cve.now/CVE-2008-0453.md): SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL commands via the category (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-01-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.