# CVEs published 2008-06-03

27 CVEs were published on June 3, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1035](https://cve.now/CVE-2008-1035.md): Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger me (no CVSS)
- [CVE-2008-0169](https://cve.now/CVE-2008-0169.md): Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and logi (no CVSS)
- [CVE-2008-2520](https://cve.now/CVE-2008-2520.md): Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when register\_globals is enabled, allow remote attackers to execute arbitr (no CVSS)
- [CVE-2008-2521](https://cve.now/CVE-2008-2521.md): SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authenticated users to ex (no CVSS)
- [CVE-2008-2522](https://cve.now/CVE-2008-2522.md): SQL injection vulnerability in members.php in Battle.net Clan Script for PHP 1.5.3 and earlier, when magic\_quotes\_gpc is disabled, allows re (no CVSS)
- [CVE-2008-2523](https://cve.now/CVE-2008-2523.md): SQL injection vulnerability in the Autopatcher server plugin in RakNet before 3.23 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-2524](https://cve.now/CVE-2008-2524.md): BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blo (no CVSS)
- [CVE-2008-2525](https://cve.now/CVE-2008-2525.md): Cross-site scripting (XSS) vulnerability in the Event Database (aka rlmp\_eventdb) extension before 1.1.2 for TYPO3 allows remote attackers t (no CVSS)
- [CVE-2008-2526](https://cve.now/CVE-2008-2526.md): Cross-site scripting (XSS) vulnerability in the WT Gallery (aka wt\_gallery) extension 2.6.2 and earlier for TYPO3 allows remote attackers to (no CVSS)
- [CVE-2008-2527](https://cve.now/CVE-2008-2527.md): Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and e (no CVSS)
- [CVE-2008-2528](https://cve.now/CVE-2008-2528.md): Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attack (no CVSS)
- [CVE-2008-2529](https://cve.now/CVE-2008-2529.md): SQL injection vulnerability in read.php in Advanced Links Management (ALM) 1.5.2 allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2008-2530](https://cve.now/CVE-2008-2530.md): Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the ( (no CVSS)
- [CVE-2008-2531](https://cve.now/CVE-2008-2531.md): Cross-site scripting (XSS) vulnerability in the search script in Build A Niche Store (BANS) 3.0 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-2532](https://cve.now/CVE-2008-2532.md): SQL injection vulnerability in forum/topic\_detail.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2008-2533](https://cve.now/CVE-2008-2533.md): Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2008-2534](https://cve.now/CVE-2008-2534.md): Directory traversal vulnerability in admin/admin\_frame.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and (no CVSS)
- [CVE-2008-2535](https://cve.now/CVE-2008-2535.md): Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2008-2536](https://cve.now/CVE-2008-2536.md): SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote attackers to execute arb (no CVSS)
- [CVE-2008-2537](https://cve.now/CVE-2008-2537.md): SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands via the cat paramete (no CVSS)
- [CVE-2008-2538](https://cve.now/CVE-2008-2538.md): Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv\_93, allows local users to insert cron jobs into (no CVSS)
- [CVE-2008-2539](https://cve.now/CVE-2008-2539.md): The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs filesystem is used, might allow lo (no CVSS)
- [CVE-2008-2540](https://cve.now/CVE-2008-2540.md): Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized conten (no CVSS)
- [CVE-2008-2516](https://cve.now/CVE-2008-2516.md): pam\_sm\_authenticate in pam\_pgsql.c in libpam-pgsql 0.6.3 does not properly consider operator precedence when evaluating the success of a pam (no CVSS)
- [CVE-2008-2517](https://cve.now/CVE-2008-2517.md): The sarab.sh script in SaraB before 0.2.4 places the dar program's encryption key on the command line, which allows local users to obtain se (no CVSS)
- [CVE-2008-2518](https://cve.now/CVE-2008-2518.md): Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 be (no CVSS)
- [CVE-2008-2519](https://cve.now/CVE-2008-2519.md): Directory traversal vulnerability in Core FTP client 2.1 Build 1565 allows remote FTP servers to create or overwrite arbitrary files via .. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-06-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.