# CVEs published 2008-06-18 31 CVEs were published on June 18, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-2753](https://cve.now/CVE-2008-2753.md): Multiple SQL injection vulnerabilities in Pooya Site Builder (PSB) 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS) - [CVE-2008-2754](https://cve.now/CVE-2008-2754.md): SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magic\_quotes\_gpc is disabled, allows remote attackers to execute (no CVSS) - [CVE-2008-2755](https://cve.now/CVE-2008-2755.md): SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS) - [CVE-2008-2756](https://cve.now/CVE-2008-2756.md): Cross-site scripting (XSS) vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitra (no CVSS) - [CVE-2008-2757](https://cve.now/CVE-2008-2757.md): SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitr (no CVSS) - [CVE-2008-2758](https://cve.now/CVE-2008-2758.md): Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute News Manager XE 3.2 allow remote authenticated administrators to injec (no CVSS) - [CVE-2008-2759](https://cve.now/CVE-2008-2759.md): Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web s (no CVSS) - [CVE-2008-2760](https://cve.now/CVE-2008-2760.md): SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execu (no CVSS) - [CVE-2008-2761](https://cve.now/CVE-2008-2761.md): Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Banner Manager XE 2.0 allow remote authenticated administrators to inj (no CVSS) - [CVE-2008-2762](https://cve.now/CVE-2008-2762.md): SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbi (no CVSS) - [CVE-2008-2763](https://cve.now/CVE-2008-2763.md): SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitr (no CVSS) - [CVE-2008-2764](https://cve.now/CVE-2008-2764.md): Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrator (no CVSS) - [CVE-2008-2765](https://cve.now/CVE-2008-2765.md): SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2008-2766](https://cve.now/CVE-2008-2766.md): Cross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2008-2767](https://cve.now/CVE-2008-2767.md): SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to e (no CVSS) - [CVE-2008-2768](https://cve.now/CVE-2008-2768.md): Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator r (no CVSS) - [CVE-2008-2769](https://cve.now/CVE-2008-2769.md): PHP remote file inclusion vulnerability in authentication/smf/smf.functions.php in Simple Machines phpRaider 1.0.6 and 1.0.7 allows remote a (no CVSS) - [CVE-2008-2770](https://cve.now/CVE-2008-2770.md): SQL injection vulnerability in index.php in MycroCMS 0.5, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary SQ (no CVSS) - [CVE-2008-2771](https://cve.now/CVE-2008-2771.md): The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remot (no CVSS) - [CVE-2008-2772](https://cve.now/CVE-2008-2772.md): The Magic Tabs module 5.x before 5.x-1.1 for Drupal allows remote attackers to execute arbitrary PHP code via unspecified URL arguments, pos (no CVSS) - [CVE-2008-2773](https://cve.now/CVE-2008-2773.md): Cross-site scripting (XSS) vulnerability in the Taxonomy Image module 5.x before 5.x-1.3 and 6.x before 6.x-1.3, a module for Drupal, allows (no CVSS) - [CVE-2008-0925](https://cve.now/CVE-2008-0925.md): Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ft (no CVSS) - [CVE-2008-2060](https://cve.now/CVE-2008-2060.md): Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and jumbo (no CVSS) - [CVE-2008-2428](https://cve.now/CVE-2008-2428.md): Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the (1) em (no CVSS) - [CVE-2008-2640](https://cve.now/CVE-2008-2640.md): Multiple cross-site scripting (XSS) vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and (no CVSS) - [CVE-2008-2749](https://cve.now/CVE-2008-2749.md): Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka (no CVSS) - [CVE-2008-2750](https://cve.now/CVE-2008-2750.md): The pppol2tp\_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6 allows remote attackers to cause a denial (no CVSS) - [CVE-2008-2751](https://cve.now/CVE-2008-2751.md): Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1\_01 allow r (no CVSS) - [CVE-2008-2752](https://cve.now/CVE-2008-2752.md): Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to (no CVSS) - [CVE-2008-2747](https://cve.now/CVE-2008-2747.md): No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\\SOFTWARE\\Vitalwerks\\DUC registry key, which allows loc (no CVSS) - [CVE-2008-2748](https://cve.now/CVE-2008-2748.md): Skulltag 0.97d2-RC2 and earlier allows remote attackers to cause a denial of service (daemon hang) via a series of long, malformed connect p (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-06-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.