# CVEs published 2008-06-27

17 CVEs were published on June 27, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2884](https://cve.now/CVE-2008-2884.md): PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2008-2885](https://cve.now/CVE-2008-2885.md): PHP remote file inclusion vulnerability in src/browser/resource/categories/resource\_categories\_view.php in Open Digital Assets Repository Sy (no CVSS)
- [CVE-2008-2886](https://cve.now/CVE-2008-2886.md): PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when register\_globals is e (no CVSS)
- [CVE-2008-2887](https://cve.now/CVE-2008-2887.md): Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local (no CVSS)
- [CVE-2008-2888](https://cve.now/CVE-2008-2888.md): Multiple PHP remote file inclusion vulnerabilities in MiGCMS 2.0.5, when register\_globals is enabled, allow remote attackers to execute arbi (no CVSS)
- [CVE-2008-2889](https://cve.now/CVE-2008-2889.md): Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to create or overwrite arbi (no CVSS)
- [CVE-2008-2890](https://cve.now/CVE-2008-2890.md): Multiple SQL injection vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 and earlier allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2008-2891](https://cve.now/CVE-2008-2891.md): SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the cat\_id para (no CVSS)
- [CVE-2008-2892](https://cve.now/CVE-2008-2892.md): SQL injection vulnerability in the EXP Shop (com\_expshop) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2008-2893](https://cve.now/CVE-2008-2893.md): SQL injection vulnerability in news.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-2894](https://cve.now/CVE-2008-2894.md): Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or over (no CVSS)
- [CVE-2008-2895](https://cve.now/CVE-2008-2895.md): Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arbitrary local files v (no CVSS)
- [CVE-2008-2896](https://cve.now/CVE-2008-2896.md): Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary local files via a .. (no CVSS)
- [CVE-2008-2897](https://cve.now/CVE-2008-2897.md): SQL injection vulnerability in index.php in PageSquid CMS 0.3 Beta allows remote attackers to execute arbitrary SQL commands via the page pa (no CVSS)
- [CVE-2008-2898](https://cve.now/CVE-2008-2898.md): Directory traversal vulnerability in includes/header.php in Hedgehog-CMS 1.21 allows remote attackers to include and execute arbitrary local (no CVSS)
- [CVE-2008-2899](https://cve.now/CVE-2008-2899.md): Unspecified vulnerability in includes/classes/page.php in j00lean-CMS 1.03 has unknown impact and attack vectors. (no CVSS)
- [CVE-2008-2900](https://cve.now/CVE-2008-2900.md): SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-06-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.