# CVEs published 2008-06-13

21 CVEs were published on June 13, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2689](https://cve.now/CVE-2008-2689.md): PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2008-2690](https://cve.now/CVE-2008-2690.md): Multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when register\_globals is enabled, allow remote attackers to execu (no CVSS)
- [CVE-2008-2691](https://cve.now/CVE-2008-2691.md): SQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2008-2692](https://cve.now/CVE-2008-2692.md): SQL injection vulnerability in the yvComment (com\_yvcomment) component 1.16.0 and earlier for Joomla! allows remote attackers to execute arb (no CVSS)
- [CVE-2008-2693](https://cve.now/CVE-2008-2693.md): Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote at (no CVSS)
- [CVE-2008-2694](https://cve.now/CVE-2008-2694.md): Cross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2008-2695](https://cve.now/CVE-2008-2695.md): Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. (no CVSS)
- [CVE-2008-2696](https://cve.now/CVE-2008-2696.md): Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value in Nik (no CVSS)
- [CVE-2008-2697](https://cve.now/CVE-2008-2697.md): SQL injection vulnerability in the Rapid Recipe (com\_rapidrecipe) component 1.6.6 and 1.6.7 for Joomla! allows remote attackers to execute a (no CVSS)
- [CVE-2008-2698](https://cve.now/CVE-2008-2698.md): Multiple cross-site scripting (XSS) vulnerabilities in photo\_add-c.php (aka the "add comment" section) in WEBalbum 2.0 and earlier allow rem (no CVSS)
- [CVE-2008-2699](https://cve.now/CVE-2008-2699.md): Multiple directory traversal vulnerabilities in Galatolo WebManager (GWM) 1.0 allow remote attackers to include and execute arbitrary local (no CVSS)
- [CVE-2008-2700](https://cve.now/CVE-2008-2700.md): SQL injection vulnerability in view.php in Galatolo WebManager 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-2701](https://cve.now/CVE-2008-2701.md): SQL injection vulnerability in the GameQ (com\_gameq) component 4.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2008-2702](https://cve.now/CVE-2008-2702.md): Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP servers to create or overw (no CVSS)
- [CVE-2008-2703](https://cve.now/CVE-2008-2703.md): Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to exe (no CVSS)
- [CVE-2008-2704](https://cve.now/CVE-2008-2704.md): Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash) via a long user ID, (no CVSS)
- [CVE-2008-2364](https://cve.now/CVE-2008-2364.md): The ap\_proxy\_http\_process\_response function in mod\_proxy\_http.c in the mod\_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not (no CVSS)
- [CVE-2008-2654](https://cve.now/CVE-2008-2654.md): Off-by-one error in the read\_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary co (no CVSS)
- [CVE-2008-2686](https://cve.now/CVE-2008-2686.md): webinc/bxe/scripts/loadsave.php in Flux CMS 1.5.0 and earlier allows remote attackers to execute arbitrary code by overwriting a PHP file in (no CVSS)
- [CVE-2008-2687](https://cve.now/CVE-2008-2687.md): Directory traversal vulnerability in inc/config.php in ProManager 0.73 allows remote attackers to include and execute arbitrary local files (no CVSS)
- [CVE-2008-2688](https://cve.now/CVE-2008-2688.md): SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-06-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.