# CVEs published 2008-03-05

15 CVEs were published on March 5, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6704](https://cve.now/CVE-2007-6704.md): Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0.1, when pre-logon se (no CVSS)
- [CVE-2008-1162](https://cve.now/CVE-2008-1162.md): SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2008-1163](https://cve.now/CVE-2008-1163.md): SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-1164](https://cve.now/CVE-2008-1164.md): SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the mod\_project\_id p (no CVSS)
- [CVE-2008-1165](https://cve.now/CVE-2008-1165.md): Multiple cross-site scripting (XSS) vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-1166](https://cve.now/CVE-2008-1166.md): Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to (no CVSS)
- [CVE-2008-1167](https://cve.now/CVE-2008-1167.md): Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attacke (no CVSS)
- [CVE-2008-1168](https://cve.now/CVE-2008-1168.md): Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2008-1169](https://cve.now/CVE-2008-1169.md): Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arb (no CVSS)
- [CVE-2008-1170](https://cve.now/CVE-2008-1170.md): Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the page (no CVSS)
- [CVE-2008-1171](https://cve.now/CVE-2008-1171.md): Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2008-1096](https://cve.now/CVE-2008-1096.md): The load\_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assiste (no CVSS)
- [CVE-2008-1097](https://cve.now/CVE-2008-1097.md): Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) Grap (no CVSS)
- [CVE-2008-1098](https://cve.now/CVE-2008-1098.md): Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or H (no CVSS, moin)
- [CVE-2008-1099](https://cve.now/CVE-2008-1099.md): \_macro\_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected (no CVSS, moin)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.