# CVEs published 2008-06-25 27 CVEs were published on June 25, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-1951](https://cve.now/CVE-2008-1951.md): Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) li (no CVSS) - [CVE-2008-2641](https://cve.now/CVE-2008-2641.md): Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of (no CVSS) - [CVE-2008-2842](https://cve.now/CVE-2008-2842.md): Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers to inject arbitrary (no CVSS) - [CVE-2008-2843](https://cve.now/CVE-2008-2843.md): Multiple SQL injection vulnerabilities in doITLive CMS 2.50 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS) - [CVE-2008-2844](https://cve.now/CVE-2008-2844.md): SQL injection vulnerability in index.php in Carscripts Classifieds allows remote attackers to execute arbitrary SQL commands via the cat par (no CVSS) - [CVE-2008-2845](https://cve.now/CVE-2008-2845.md): SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL commands via the cat paramet (no CVSS) - [CVE-2008-2846](https://cve.now/CVE-2008-2846.md): SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL commands via the type p (no CVSS) - [CVE-2008-2847](https://cve.now/CVE-2008-2847.md): SQL injection vulnerability in the Trade module in Maxtrade AIO 1.3.23 allows remote attackers to execute arbitrary SQL commands via the cat (no CVSS) - [CVE-2008-2848](https://cve.now/CVE-2008-2848.md): Cross-site scripting (XSS) vulnerability in the search functionality in MindTouch DekiWiki before 8.05.1 allows remote attackers to inject a (no CVSS) - [CVE-2008-2849](https://cve.now/CVE-2008-2849.md): Cross-site scripting (XSS) vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote authenticated users, with crea (no CVSS) - [CVE-2008-2850](https://cve.now/CVE-2008-2850.md): SQL injection vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2008-2851](https://cve.now/CVE-2008-2851.md): Multiple buffer overflows in OFF System before 0.19.14 allow remote attackers to have an unknown impact via unspecified vectors related to " (no CVSS) - [CVE-2008-2852](https://cve.now/CVE-2008-2852.md): Cross-site scripting (XSS) vulnerability in CGIWrap before 4.1, when an Internet Explorer based browser is used, allows remote attackers to (no CVSS) - [CVE-2008-2853](https://cve.now/CVE-2008-2853.md): SQL injection vulnerability in index.php in Easy Webstore 1.2 allows remote attackers to execute arbitrary SQL commands via the cat\_path par (no CVSS) - [CVE-2008-2854](https://cve.now/CVE-2008-2854.md): Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS) - [CVE-2008-2855](https://cve.now/CVE-2008-2855.md): Cross-site scripting (XSS) vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS) - [CVE-2008-2856](https://cve.now/CVE-2008-2856.md): SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS) - [CVE-2008-2857](https://cve.now/CVE-2008-2857.md): AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain s (no CVSS) - [CVE-2008-2858](https://cve.now/CVE-2008-2858.md): SQL injection vulnerability in index.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the eml parameter. (no CVSS) - [CVE-2008-2859](https://cve.now/CVE-2008-2859.md): Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service (daemon (no CVSS) - [CVE-2008-2860](https://cve.now/CVE-2008-2860.md): SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2008-2861](https://cve.now/CVE-2008-2861.md): Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to inject arbi (no CVSS) - [CVE-2008-2862](https://cve.now/CVE-2008-2862.md): Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to execute arbitrary SQL co (no CVSS) - [CVE-2008-2863](https://cve.now/CVE-2008-2863.md): Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary (no CVSS) - [CVE-2008-2864](https://cve.now/CVE-2008-2864.md): eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) trigger. (no CVSS) - [CVE-2008-2865](https://cve.now/CVE-2008-2865.md): SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbitrary SQL commands vi (no CVSS) - [CVE-2008-2866](https://cve.now/CVE-2008-2866.md): SQL injection vulnerability in csc\_article\_details.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to execute arbitrary SQL c (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-06-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.