# CVEs published 2008-06-06

20 CVEs were published on June 6, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1805](https://cve.now/CVE-2008-1805.md): Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass (no CVSS)
- [CVE-2008-2388](https://cve.now/CVE-2008-2388.md): Multiple off-by-one errors in opensuse-updater in openSUSE 10.2 have unspecified impact and attack vectors. (no CVSS)
- [CVE-2008-2389](https://cve.now/CVE-2008-2389.md): opensuse-updater in openSUSE 10.2 allows local users to access arbitrary files via a symlink attack. (no CVSS)
- [CVE-2008-2545](https://cve.now/CVE-2008-2545.md): Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows (no CVSS)
- [CVE-2008-2574](https://cve.now/CVE-2008-2574.md): Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2008-2575](https://cve.now/CVE-2008-2575.md): cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) (no CVSS)
- [CVE-2008-2560](https://cve.now/CVE-2008-2560.md): SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter. (no CVSS)
- [CVE-2008-2561](https://cve.now/CVE-2008-2561.md): Multiple cross-site scripting (XSS) vulnerabilities in 427BB 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS)
- [CVE-2008-2562](https://cve.now/CVE-2008-2562.md): SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL comma (no CVSS)
- [CVE-2008-2563](https://cve.now/CVE-2008-2563.md): Multiple cross-site scripting (XSS) vulnerabilities in (1) dsp\_main.php and (2) dsp\_task\_editor.php in SamTodo 1.1 allow remote attackers to (no CVSS)
- [CVE-2008-2564](https://cve.now/CVE-2008-2564.md): SQL injection vulnerability in the JotLoader (com\_jotloader) component 1.2.1.a and earlier for Joomla! allows remote attackers to execute ar (no CVSS)
- [CVE-2008-2565](https://cve.now/CVE-2008-2565.md): Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-2566](https://cve.now/CVE-2008-2566.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-2567](https://cve.now/CVE-2008-2567.md): Cross-site scripting (XSS) vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and G (no CVSS)
- [CVE-2008-2568](https://cve.now/CVE-2008-2568.md): SQL injection vulnerability in the Simple Shop Galore (com\_simpleshop) component 3.4 and earlier for Joomla! allows remote attackers to exec (no CVSS)
- [CVE-2008-2569](https://cve.now/CVE-2008-2569.md): SQL injection vulnerability in the EasyBook (com\_easybook) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2008-2570](https://cve.now/CVE-2008-2570.md): Multiple unspecified vulnerabilities in LimeSurvey (formerly PHPSurveyor) before 1.71 have unknown impact and attack vectors. (no CVSS)
- [CVE-2008-2571](https://cve.now/CVE-2008-2571.md): Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary (no CVSS)
- [CVE-2008-2572](https://cve.now/CVE-2008-2572.md): SQL injection vulnerability in php/leer\_comentarios.php in FlashBlog allows remote attackers to execute arbitrary SQL commands via the artic (no CVSS)
- [CVE-2008-2573](https://cve.now/CVE-2008-2573.md): Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-06-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.