# CVEs published 2008-04-11

20 CVEs were published on April 11, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1750](https://cve.now/CVE-2008-1750.md): SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-1751](https://cve.now/CVE-2008-1751.md): Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local files via a .. (no CVSS)
- [CVE-2008-1752](https://cve.now/CVE-2008-1752.md): ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain crede (no CVSS)
- [CVE-2008-1753](https://cve.now/CVE-2008-1753.md): Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers t (no CVSS, org.opencms:opencms-core)
- [CVE-2008-1754](https://cve.now/CVE-2008-1754.md): Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, whic (no CVSS)
- [CVE-2008-1755](https://cve.now/CVE-2008-1755.md): Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote attackers to read arbit (no CVSS)
- [CVE-2008-1756](https://cve.now/CVE-2008-1756.md): Unspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to cause a denial of service (daemon crash) via (no CVSS)
- [CVE-2008-1724](https://cve.now/CVE-2008-1724.md): Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst\_en.dll 1 (no CVSS)
- [CVE-2008-1725](https://cve.now/CVE-2008-1725.md): The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes th (no CVSS)
- [CVE-2008-1726](https://cve.now/CVE-2008-1726.md): Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic\_quotes\_gpc is disabled, allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-1727](https://cve.now/CVE-2008-1727.md): KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary a (no CVSS)
- [CVE-2008-1728](https://cve.now/CVE-2008-1728.md): ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service (daemon outage) (no CVSS, org.igniterealtime.openfire:parent · org.igniterealtime.ope…)
- [CVE-2008-1729](https://cve.now/CVE-2008-1729.md): The menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers to (1) edit the profile pages of arbitrary (no CVSS)
- [CVE-2008-1730](https://cve.now/CVE-2008-1730.md): Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Scr (no CVSS)
- [CVE-2008-1731](https://cve.now/CVE-2008-1731.md): The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remo (no CVSS)
- [CVE-2008-1732](https://cve.now/CVE-2008-1732.md): SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2008-1733](https://cve.now/CVE-2008-1733.md): SQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU Arcade (com\_puarcade) component for Joomla! all (no CVSS)
- [CVE-2008-1658](https://cve.now/CVE-2008-1658.md): Format string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and earlier allows attackers to cause a denial of s (no CVSS)
- [CVE-2008-1703](https://cve.now/CVE-2008-1703.md): Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute a (no CVSS)
- [CVE-2008-1704](https://cve.now/CVE-2008-1704.md): Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.