# CVEs published 2008-02-13

56 CVEs were published on February 13, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1541](https://cve.now/CVE-2003-1541.md): PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allows remote attackers t (no CVSS)
- [CVE-2003-1542](https://cve.now/CVE-2003-1542.md): Directory traversal vulnerability in plugins/file.php in phpWebFileManager before 0.4.4 allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2003-1543](https://cve.now/CVE-2003-1543.md): Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject a (no CVSS)
- [CVE-2003-1544](https://cve.now/CVE-2003-1544.md): Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cau (no CVSS)
- [CVE-2006-7231](https://cve.now/CVE-2006-7231.md): SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL commands via the Entry (no CVSS)
- [CVE-2008-0769](https://cve.now/CVE-2008-0769.md): Cross-site scripting (XSS) vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows rem (no CVSS)
- [CVE-2008-0770](https://cve.now/CVE-2008-0770.md): SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-0771](https://cve.now/CVE-2008-0771.md): Multiple SQL injection vulnerabilities in default.asp in Site2Nite allow remote attackers to execute arbitrary SQL commands via the (1) txtU (no CVSS)
- [CVE-2008-0772](https://cve.now/CVE-2008-0772.md): SQL injection vulnerability in index.php in the com\_doc component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2008-0773](https://cve.now/CVE-2008-0773.md): SQL injection vulnerability in Phil Taylor Comments (com\_comments, aka Review Script) 0.5.8.5g and earlier component for Mambo allows remote (no CVSS)
- [CVE-2008-0774](https://cve.now/CVE-2008-0774.md): Cross-site scripting (XSS) vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers t (no CVSS)
- [CVE-2008-0775](https://cve.now/CVE-2008-0775.md): Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1.14 through 1.16b allows remote attackers to (no CVSS)
- [CVE-2008-0776](https://cve.now/CVE-2008-0776.md): SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the item\_id pa (no CVSS)
- [CVE-2008-0768](https://cve.now/CVE-2008-0768.md): Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Inform (no CVSS)
- [CVE-2007-6148](https://cve.now/CVE-2007-6148.md): Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allo (no CVSS)
- [CVE-2007-6149](https://cve.now/CVE-2007-6149.md): Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow (no CVSS)
- [CVE-2007-6431](https://cve.now/CVE-2007-6431.md): Unspecified vulnerability in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to (no CVSS)
- [CVE-2007-6701](https://cve.now/CVE-2007-6701.md): Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP4 for Windows allow remote attackers to e (no CVSS)
- [CVE-2008-0639](https://cve.now/CVE-2008-0639.md): Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Wi (no CVSS)
- [CVE-2008-0658](https://cve.now/CVE-2008-0658.md): slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daem (no CVSS)
- [CVE-2008-0757](https://cve.now/CVE-2008-0757.md): Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2008-0758](https://cve.now/CVE-2008-0758.md): Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earli (no CVSS)
- [CVE-2008-0759](https://cve.now/CVE-2008-0759.md): ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service (daemon crash (no CVSS)
- [CVE-2008-0760](https://cve.now/CVE-2008-0760.md): Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, a (no CVSS)
- [CVE-2008-0761](https://cve.now/CVE-2008-0761.md): SQL injection vulnerability in index.php in the Prince Clan Chess Club (com\_pcchess) 0.8 and earlier component for Joomla! allows remote att (no CVSS)
- [CVE-2008-0762](https://cve.now/CVE-2008-0762.md): SQL injection vulnerability in index.php in the com\_iomezun component for Joomla! allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-0763](https://cve.now/CVE-2008-0763.md): Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier allows remote attackers to e (no CVSS)
- [CVE-2008-0764](https://cve.now/CVE-2008-0764.md): Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might al (no CVSS)
- [CVE-2008-0765](https://cve.now/CVE-2008-0765.md): Multiple cross-site scripting (XSS) vulnerabilities in artmedic webdesign weblog allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2008-0766](https://cve.now/CVE-2008-0766.md): Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager (RPM) 4.5.1.11 and earlier (Elite and Select) for Windows allows r (no CVSS)
- [CVE-2008-0767](https://cve.now/CVE-2008-0767.md): ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consisten (no CVSS)
- [CVE-2008-0745](https://cve.now/CVE-2008-0745.md): Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via (no CVSS)
- [CVE-2008-0746](https://cve.now/CVE-2008-0746.md): SQL injection vulnerability in index.php in the Gallery (com\_gallery) component for Mambo and Joomla! allows remote attackers to execute arb (no CVSS)
- [CVE-2008-0747](https://cve.now/CVE-2008-0747.md): Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2008-0748](https://cve.now/CVE-2008-0748.md): Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 (no CVSS)
- [CVE-2008-0749](https://cve.now/CVE-2008-0749.md): Cross-site scripting (XSS) vulnerability in index.php in Calimero.CMS 3.3 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2008-0750](https://cve.now/CVE-2008-0750.md): SQL injection vulnerability in philboard\_forum.asp in Husrev BlackBoard 2.0.2 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-0751](https://cve.now/CVE-2008-0751.md): Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows (no CVSS)
- [CVE-2008-0752](https://cve.now/CVE-2008-0752.md): SQL injection vulnerability in index.php in the Neogallery (com\_neogallery) 1.1 component for Joomla! allows remote attackers to execute arb (no CVSS)
- [CVE-2008-0753](https://cve.now/CVE-2008-0753.md): SQL injection vulnerability in calendar.php in Virtual War (VWar) 1.5 allows remote attackers to execute arbitrary SQL commands via the mont (no CVSS)
- [CVE-2008-0754](https://cve.now/CVE-2008-0754.md): Multiple SQL injection vulnerabilities in index.php in the Rapid Recipe (com\_rapidrecipe) 1.6.5 component for Joomla! allow remote attackers (no CVSS)
- [CVE-2008-0755](https://cve.now/CVE-2008-0755.md): Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPri (no CVSS)
- [CVE-2008-0756](https://cve.now/CVE-2008-0756.md): The LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Wor (no CVSS)
- [CVE-2003-1540](https://cve.now/CVE-2003-1540.md): WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a (no CVSS)
- [CVE-2008-0742](https://cve.now/CVE-2008-0742.md): Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via (no CVSS)
- [CVE-2008-0743](https://cve.now/CVE-2008-0743.md): PHP remote file inclusion vulnerability in members\_help.php in Joovili 2.1 and earlier allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2008-0744](https://cve.now/CVE-2008-0744.md): SQL injection vulnerability in user\_login.asp in PreProjects.com Pre Hotels & Resorts Management System allows remote attackers to execute a (no CVSS)
- [CVE-2008-0733](https://cve.now/CVE-2008-0733.md): SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-0734](https://cve.now/CVE-2008-0734.md): SQL injection vulnerability in class\_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitr (no CVSS)
- [CVE-2008-0735](https://cve.now/CVE-2008-0735.md): SQL injection vulnerability in mod/gallery/ajax/gallery\_data.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-0736](https://cve.now/CVE-2008-0736.md): admin/SA\_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attackers to obtain the path (no CVSS)
- [CVE-2008-0737](https://cve.now/CVE-2008-0737.md): SQL injection vulnerability in admin/utilities\_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x versions, allows remote att (no CVSS)
- [CVE-2008-0738](https://cve.now/CVE-2008-0738.md): Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-0739](https://cve.now/CVE-2008-0739.md): SQL injection vulnerability in admin/SA\_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x versions, allows remote atta (no CVSS)
- [CVE-2008-0740](https://cve.now/CVE-2008-0740.md): IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartex (no CVSS)
- [CVE-2008-0741](https://cve.now/CVE-2008-0741.md): Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.2 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.