# CVEs published 2008-02-20

16 CVEs were published on February 20, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0834](https://cve.now/CVE-2008-0834.md): Cross-site scripting (XSS) vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports (no CVSS)
- [CVE-2008-0835](https://cve.now/CVE-2008-0835.md): SQL injection vulnerability in indexen.php in Simple CMS 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-0836](https://cve.now/CVE-2008-0836.md): Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local users to cause a denial (no CVSS)
- [CVE-2008-0837](https://cve.now/CVE-2008-0837.md): Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote at (no CVSS)
- [CVE-2008-0838](https://cve.now/CVE-2008-0838.md): Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance (no CVSS)
- [CVE-2008-0839](https://cve.now/CVE-2008-0839.md): SQL injection vulnerability in refer.php in the astatsPRO (com\_astatspro) 1.0 component for Joomla! allows remote attackers to execute arbit (no CVSS)
- [CVE-2008-0840](https://cve.now/CVE-2008-0840.md): Directory traversal vulnerability in view\_member.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitr (no CVSS)
- [CVE-2008-0841](https://cve.now/CVE-2008-0841.md): SQL injection vulnerability in index.php in the Giorgio Nordo Ricette (com\_ricette) 1.0 component for Joomla! and Mambo allows remote attack (no CVSS)
- [CVE-2008-0842](https://cve.now/CVE-2008-0842.md): SQL injection vulnerability in index.php in the Classifier (com\_clasifier) component for Joomla! allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2008-0843](https://cve.now/CVE-2008-0843.md): StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin (no CVSS)
- [CVE-2008-0844](https://cve.now/CVE-2008-0844.md): SQL injection vulnerability in index.php in the PccookBook (com\_pccookbook) component for Joomla! allows remote attackers to execute arbitra (no CVSS)
- [CVE-2008-0845](https://cve.now/CVE-2008-0845.md): SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arb (no CVSS)
- [CVE-2008-0846](https://cve.now/CVE-2008-0846.md): SQL injection vulnerability in index.php in the com\_profile component for Joomla! allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-0831](https://cve.now/CVE-2008-0831.md): Multiple SQL injection vulnerabilities in the Rapid Recipe (com\_rapidrecipe) 1.6.5 and earlier component for Joomla! allow remote attackers (no CVSS)
- [CVE-2008-0832](https://cve.now/CVE-2008-0832.md): SQL injection vulnerability in index.php in the Kemas Antonius com\_quran 1.1 and earlier component for Mambo and Joomla! allows remote attac (no CVSS)
- [CVE-2008-0833](https://cve.now/CVE-2008-0833.md): SQL injection vulnerability in index.php in the com\_galeria component for Joomla! allows remote attackers to execute arbitrary SQL commands (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.