# CVEs published 2008-06-10

33 CVEs were published on June 10, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0960](https://cve.now/CVE-2008-0960.md): SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) J (no CVSS)
- [CVE-2008-1581](https://cve.now/CVE-2008-1581.md): Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause a denial of service (crash) and possibl (no CVSS)
- [CVE-2008-1582](https://cve.now/CVE-2008-1582.md): Unspecified vulnerability in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute ar (no CVSS)
- [CVE-2008-1583](https://cve.now/CVE-2008-1583.md): Heap-based buffer overflow in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute a (no CVSS)
- [CVE-2008-1584](https://cve.now/CVE-2008-1584.md): Stack-based buffer overflow in Indeo.qtx in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) or execu (no CVSS)
- [CVE-2008-1585](https://cve.now/CVE-2008-1585.md): Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in vide (no CVSS)
- [CVE-2008-2152](https://cve.now/CVE-2008-2152.md): Integer overflow in the rtl\_allocateMemory function in sal/rtl/source/alloc\_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote a (no CVSS)
- [CVE-2008-2642](https://cve.now/CVE-2008-2642.md): SQL injection vulnerability in login.php in OtomiGenX 2.2 allows remote attackers to execute arbitrary SQL commands via the userAccount para (no CVSS)
- [CVE-2008-2643](https://cve.now/CVE-2008-2643.md): SQL injection vulnerability in the Bible Study (com\_biblestudy) component before 6.0.7c for Joomla! allows remote attackers to execute arbit (no CVSS)
- [CVE-2008-2644](https://cve.now/CVE-2008-2644.md): Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2008-2645](https://cve.now/CVE-2008-2645.md): Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2008-2646](https://cve.now/CVE-2008-2646.md): Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-2647](https://cve.now/CVE-2008-2647.md): SQL injection vulnerability in admin/journal\_change\_mask.inc.php in meBiblio 0.4.7 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-2648](https://cve.now/CVE-2008-2648.md): Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbitrary code by upload (no CVSS)
- [CVE-2008-2649](https://cve.now/CVE-2008-2649.md): Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2008-2650](https://cve.now/CVE-2008-2650.md): Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register\_globals is enabled, allows remote attackers to include (no CVSS)
- [CVE-2008-2651](https://cve.now/CVE-2008-2651.md): SQL injection vulnerability in the Joomla! Bulletin Board (aka Joo!BB or com\_joobb) component 0.5.9 for Joomla! allows remote attackers to e (no CVSS)
- [CVE-2008-2652](https://cve.now/CVE-2008-2652.md): Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2008-1673](https://cve.now/CVE-2008-1673.md): The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip\_nat\_snmp\_basic modul (no CVSS)
- [CVE-2008-2358](https://cve.now/CVE-2008-2358.md): Integer overflow in the dccp\_feat\_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Lin (no CVSS)
- [CVE-2008-2626](https://cve.now/CVE-2008-2626.md): SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-2627](https://cve.now/CVE-2008-2627.md): SQL injection vulnerability in the IDoBlog (com\_idoblog) component b24 and earlier and 1.0, a component for Joomla!, allows remote attackers (no CVSS)
- [CVE-2008-2628](https://cve.now/CVE-2008-2628.md): SQL injection vulnerability in the eQuotes (com\_equotes) component 0.9.4 for Joomla! allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2008-2629](https://cve.now/CVE-2008-2629.md): SQL injection vulnerability in the LifeType (formerly pLog) module for Drupal allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-2630](https://cve.now/CVE-2008-2630.md): SQL injection vulnerability in the JooBlog (com\_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2008-2631](https://cve.now/CVE-2008-2631.md): The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference (no CVSS)
- [CVE-2008-2632](https://cve.now/CVE-2008-2632.md): SQL injection vulnerability in the acctexp (com\_acctexp) component 0.12.x and earlier for Joomla! allows remote attackers to execute arbitra (no CVSS)
- [CVE-2008-2633](https://cve.now/CVE-2008-2633.md): Multiple SQL injection vulnerabilities in the EXP JoomRadio (com\_joomradio) component 1.0 for Joomla! allow remote attackers to execute arbi (no CVSS)
- [CVE-2008-2634](https://cve.now/CVE-2008-2634.md): SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2008-2635](https://cve.now/CVE-2008-2635.md): Multiple directory traversal vulnerabilities in BitKinex 2.9.3 allow remote FTP and WebDAV servers to create or overwrite arbitrary files vi (no CVSS)
- [CVE-2008-2636](https://cve.now/CVE-2008-2636.md): The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service (management interfac (no CVSS)
- [CVE-2008-2637](https://cve.now/CVE-2008-2637.md): Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions, allow remote attac (no CVSS)
- [CVE-2008-2638](https://cve.now/CVE-2008-2638.md): Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-06-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.