# CVEs published 2008-05-06

11 CVEs were published on May 6, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2091](https://cve.now/CVE-2008-2091.md): Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local file (no CVSS)
- [CVE-2008-2092](https://cve.now/CVE-2008-2092.md): Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). (no CVSS)
- [CVE-2008-2093](https://cve.now/CVE-2008-2093.md): SQL injection vulnerability in the Profiler (com\_comprofiler) component in Community Builder for Mambo and Joomla! allows remote attackers t (no CVSS)
- [CVE-2008-2094](https://cve.now/CVE-2008-2094.md): SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-2095](https://cve.now/CVE-2008-2095.md): SQL injection vulnerability in index.php in the FlippingBook (com\_flippingbook) 1.0.4 component for Joomla! allows remote attackers to execu (no CVSS)
- [CVE-2008-2005](https://cve.now/CVE-2008-2005.md): The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attacke (no CVSS)
- [CVE-2008-2080](https://cve.now/CVE-2008-2080.md): Stack-based buffer overflow in the Read32s\_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CD (no CVSS)
- [CVE-2008-2087](https://cve.now/CVE-2008-2087.md): SQL injection vulnerability in search\_result.php in Softbiz Web Host Directory Script, when magic\_quotes\_gpc is disabled, allows remote atta (no CVSS)
- [CVE-2008-2088](https://cve.now/CVE-2008-2088.md): SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2008-2089](https://cve.now/CVE-2008-2089.md): Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (panic) (no CVSS)
- [CVE-2008-2090](https://cve.now/CVE-2008-2090.md): Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (CPU co (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.