# CVEs published 2008-02-22

29 CVEs were published on February 22, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0911](https://cve.now/CVE-2008-0911.md): SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL comma (no CVSS)
- [CVE-2008-0912](https://cve.now/CVE-2008-0912.md): Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10 (no CVSS)
- [CVE-2008-0913](https://cve.now/CVE-2008-0913.md): Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-0914](https://cve.now/CVE-2008-0914.md): Multiple cross-site scripting (XSS) vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3. (no CVSS)
- [CVE-2008-0915](https://cve.now/CVE-2008-0915.md): The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remaining allowed login attem (no CVSS)
- [CVE-2008-0916](https://cve.now/CVE-2008-0916.md): SQL injection vulnerability in the Highwood Design hwdVideoShare (com\_hwdvideoshare) 1.1.3 Alpha component for Joomla! allows remote attack (no CVSS)
- [CVE-2008-0917](https://cve.now/CVE-2008-0917.md): Cross-site scripting (XSS) vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 and earlier, Diary.cg (no CVSS)
- [CVE-2008-0918](https://cve.now/CVE-2008-0918.md): SQL injection vulnerability in includes/count\_dl\_or\_link.inc.php in the astatsPRO (com\_astatspro) 1.0.1 component for Joomla! allows remote (no CVSS)
- [CVE-2008-0919](https://cve.now/CVE-2008-0919.md): Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 and earlier a (no CVSS)
- [CVE-2008-0920](https://cve.now/CVE-2008-0920.md): SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 allows remote authen (no CVSS)
- [CVE-2008-0921](https://cve.now/CVE-2008-0921.md): SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2008-0922](https://cve.now/CVE-2008-0922.md): SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid pa (no CVSS)
- [CVE-2008-0910](https://cve.now/CVE-2008-0910.md): Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Serv (no CVSS)
- [CVE-2008-0162](https://cve.now/CVE-2008-0162.md): misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges. (no CVSS)
- [CVE-2008-0895](https://cve.now/CVE-2008-0895.md): BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via craf (no CVSS)
- [CVE-2008-0896](https://cve.now/CVE-2008-0896.md): BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement poli (no CVSS)
- [CVE-2008-0897](https://cve.now/CVE-2008-0897.md): Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass (no CVSS)
- [CVE-2008-0898](https://cve.now/CVE-2008-0898.md): The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not properly handle when a cli (no CVSS)
- [CVE-2008-0899](https://cve.now/CVE-2008-0899.md): Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote att (no CVSS)
- [CVE-2008-0900](https://cve.now/CVE-2008-0900.md): Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated (no CVSS)
- [CVE-2008-0901](https://cve.now/CVE-2008-0901.md): BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account (no CVSS)
- [CVE-2008-0902](https://cve.now/CVE-2008-0902.md): Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject (no CVSS)
- [CVE-2008-0903](https://cve.now/CVE-2008-0903.md): Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10 (no CVSS)
- [CVE-2008-0904](https://cve.now/CVE-2008-0904.md): Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 al (no CVSS)
- [CVE-2008-0905](https://cve.now/CVE-2008-0905.md): Directory traversal vulnerability in globsy\_edit.php in Globsy 1.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-0906](https://cve.now/CVE-2008-0906.md): SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid paramete (no CVSS)
- [CVE-2008-0907](https://cve.now/CVE-2008-0907.md): SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid paramete (no CVSS)
- [CVE-2008-0908](https://cve.now/CVE-2008-0908.md): SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary SQL commands via the c (no CVSS)
- [CVE-2008-0909](https://cve.now/CVE-2008-0909.md): Cross-site scripting (XSS) vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.