# CVEs published 2008-04-18

16 CVEs were published on April 18, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1889](https://cve.now/CVE-2008-1889.md): SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magic\_quotes\_gpc is disabled, allows remote attac (no CVSS)
- [CVE-2008-1890](https://cve.now/CVE-2008-1890.md): SQL injection vulnerability in the Jom Comment 2.0 build 345 component for Joomla! allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-1891](https://cve.now/CVE-2008-1891.md): Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7 (no CVSS)
- [CVE-2008-1892](https://cve.now/CVE-2008-1892.md): Cross-site scripting (XSS) vulnerability in bs\_auth.php in Blogator-script 0.95 and 1.01 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-1893](https://cve.now/CVE-2008-1893.md): PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL i (no CVSS)
- [CVE-2008-1894](https://cve.now/CVE-2008-1894.md): Cross-site scripting (XSS) vulnerability in desktoplaunch/InfoView/logon/logon.object in BusinessObjects InfoView XI R2 SP1, SP2, and SP3 Ja (no CVSS)
- [CVE-2008-1895](https://cve.now/CVE-2008-1895.md): Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-1896](https://cve.now/CVE-2008-1896.md): Multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-1888](https://cve.now/CVE-2008-1888.md): Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-1887](https://cve.now/CVE-2008-1887.md): Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value (no CVSS)
- [CVE-2008-1693](https://cve.now/CVE-2008-1693.md): The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other (no CVSS)
- [CVE-2008-1734](https://cve.now/CVE-2008-1734.md): Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of service (PHP outage) and re (no CVSS)
- [CVE-2008-1883](https://cve.now/CVE-2008-1883.md): The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remo (no CVSS)
- [CVE-2008-1884](https://cve.now/CVE-2008-1884.md): Directory traversal vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to read arbitrary files via directory trav (no CVSS)
- [CVE-2008-1885](https://cve.now/CVE-2008-1885.md): Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download allows re (no CVSS)
- [CVE-2008-1886](https://cve.now/CVE-2008-1886.md): The NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that bloc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.