# CVEs published 2008-03-12

26 CVEs were published on March 12, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1295](https://cve.now/CVE-2008-1295.md): SQL injection vulnerability in archives.php in Gregory Kokanosky (aka Greg's Place) phpMyNewsletter 0.8 beta 5 and earlier allows remote att (no CVSS)
- [CVE-2008-1296](https://cve.now/CVE-2008-1296.md): Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2008-1297](https://cve.now/CVE-2008-1297.md): SQL injection vulnerability in index.php in the eWriting (com\_ewriting) 1.2.1 module for Mambo and Joomla! allows remote attackers to execut (no CVSS)
- [CVE-2008-1298](https://cve.now/CVE-2008-1298.md): SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in (no CVSS)
- [CVE-2008-1299](https://cve.now/CVE-2008-1299.md): Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote at (CVSS 6.1)
- [CVE-2008-1300](https://cve.now/CVE-2008-1300.md): Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileView (no CVSS, org.opencms:opencms-core)
- [CVE-2008-1301](https://cve.now/CVE-2008-1301.md): Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7 (no CVSS, org.opencms:opencms-core)
- [CVE-2008-1302](https://cve.now/CVE-2008-1302.md): The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon cra (no CVSS)
- [CVE-2008-1303](https://cve.now/CVE-2008-1303.md): The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon cra (no CVSS)
- [CVE-2008-1304](https://cve.now/CVE-2008-1304.md): Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-1305](https://cve.now/CVE-2008-1305.md): SQL injection vulnerability in filebase.php in the Filebase mod for phpBB allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-1306](https://cve.now/CVE-2008-1306.md): Multiple cross-site scripting (XSS) vulnerabilities in Savvy Content Manager (CM) allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2008-1307](https://cve.now/CVE-2008-1307.md): Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 200 (no CVSS)
- [CVE-2008-1308](https://cve.now/CVE-2008-1308.md): SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2008-1309](https://cve.now/CVE-2008-1309.md): The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before (no CVSS)
- [CVE-2008-1310](https://cve.now/CVE-2008-1310.md): Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900. (no CVSS)
- [CVE-2008-1311](https://cve.now/CVE-2008-1311.md): The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) (no CVSS)
- [CVE-2008-1312](https://cve.now/CVE-2008-1312.md): Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allow (no CVSS)
- [CVE-2008-1313](https://cve.now/CVE-2008-1313.md): Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-1314](https://cve.now/CVE-2008-1314.md): SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2007-6253](https://cve.now/CVE-2007-6253.md): Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary code via unknown vector (no CVSS)
- [CVE-2008-0643](https://cve.now/CVE-2008-0643.md): Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-0644](https://cve.now/CVE-2008-0644.md): Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism for application (no CVSS)
- [CVE-2008-0890](https://cve.now/CVE-2008-0890.md): Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and (no CVSS)
- [CVE-2008-1202](https://cve.now/CVE-2008-1202.md): Cross-site scripting (XSS) vulnerability in the web management interface in Adobe LiveCycle Workflow 6.2 allows remote attackers to inject a (no CVSS)
- [CVE-2008-1203](https://cve.now/CVE-2008-1203.md): The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.