# CVEs published 2008-02-19

25 CVEs were published on February 19, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6319](https://cve.now/CVE-2007-6319.md): Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to ( (no CVSS)
- [CVE-2008-0830](https://cve.now/CVE-2008-0830.md): The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (crash) via a malforme (no CVSS)
- [CVE-2008-0827](https://cve.now/CVE-2008-0827.md): SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter. (no CVSS)
- [CVE-2008-0828](https://cve.now/CVE-2008-0828.md): Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2008-0829](https://cve.now/CVE-2008-0829.md): SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com\_jooget) 2.6.8 component for Joomla! and Mambo allows remote attack (no CVSS)
- [CVE-2008-0818](https://cve.now/CVE-2008-0818.md): Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitrary local files via a (no CVSS)
- [CVE-2008-0819](https://cve.now/CVE-2008-0819.md): Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include and execute arbitrary (no CVSS)
- [CVE-2008-0820](https://cve.now/CVE-2008-0820.md): Cross-site scripting (XSS) vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2008-0821](https://cve.now/CVE-2008-0821.md): SQL injection vulnerability in admin/traffic/knowledge\_searchm.php in OSI Codes Inc. (no CVSS)
- [CVE-2008-0822](https://cve.now/CVE-2008-0822.md): Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. (no CVSS)
- [CVE-2008-0823](https://cve.now/CVE-2008-0823.md): Unspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote attackers to access the administration pages vi (no CVSS)
- [CVE-2008-0824](https://cve.now/CVE-2008-0824.md): Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors. (no CVSS)
- [CVE-2008-0825](https://cve.now/CVE-2008-0825.md): SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS)
- [CVE-2008-0826](https://cve.now/CVE-2008-0826.md): Cross-site scripting (XSS) vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web script or HTML via unspec (no CVSS)
- [CVE-2008-0810](https://cve.now/CVE-2008-0810.md): SQL injection vulnerability in the com\_scheduling module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-0811](https://cve.now/CVE-2008-0811.md): Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1) the kid parameter to (no CVSS)
- [CVE-2008-0812](https://cve.now/CVE-2008-0812.md): Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arbitrary files via a .. (no CVSS)
- [CVE-2008-0813](https://cve.now/CVE-2008-0813.md): Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote attackers to read arbitr (no CVSS)
- [CVE-2008-0814](https://cve.now/CVE-2008-0814.md): Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases (TRUC) 0.11.0 allows remote attackers to read arbitra (no CVSS)
- [CVE-2008-0815](https://cve.now/CVE-2008-0815.md): SQL injection vulnerability in the com\_mezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id para (no CVSS)
- [CVE-2008-0816](https://cve.now/CVE-2008-0816.md): SQL injection vulnerability in the com\_sg component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-0817](https://cve.now/CVE-2008-0817.md): SQL injection vulnerability in the com\_filebase component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-0807](https://cve.now/CVE-2008-0807.md): lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Gro (no CVSS)
- [CVE-2008-0808](https://cve.now/CVE-2008-0808.md): Cross-site scripting (XSS) vulnerability in the meta plugin in Ikiwiki before 1.1.47 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-0809](https://cve.now/CVE-2008-0809.md): Cross-site scripting (XSS) vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.