# CVEs published 2008-06-30

39 CVEs were published on June 30, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0598](https://cve.now/CVE-2008-0598.md): Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other versions allows local use (no CVSS)
- [CVE-2008-2462](https://cve.now/CVE-2008-2462.md): Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows (no CVSS)
- [CVE-2008-2729](https://cve.now/CVE-2008-2729.md): arch/x86\_64/lib/copy\_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exc (no CVSS)
- [CVE-2008-2945](https://cve.now/CVE-2008-2945.md): Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in X (no CVSS)
- [CVE-2008-2946](https://cve.now/CVE-2008-2946.md): The SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cau (no CVSS)
- [CVE-2008-2947](https://cve.now/CVE-2008-2947.md): Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from o (no CVSS)
- [CVE-2008-2948](https://cve.now/CVE-2008-2948.md): Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the (no CVSS)
- [CVE-2008-2949](https://cve.now/CVE-2008-2949.md): Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the (no CVSS)
- [CVE-2006-5265](https://cve.now/CVE-2006-5265.md): Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2006-5266](https://cve.now/CVE-2006-5266.md): Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code (no CVSS)
- [CVE-2008-2365](https://cve.now/CVE-2008-2365.md): Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allo (no CVSS)
- [CVE-2008-2943](https://cve.now/CVE-2008-2943.md): Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause (no CVSS)
- [CVE-2008-2944](https://cve.now/CVE-2008-2944.md): Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (no CVSS)
- [CVE-2008-2942](https://cve.now/CVE-2008-2942.md): Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) (no CVSS, mercurial)
- [CVE-2008-2901](https://cve.now/CVE-2008-2901.md): Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated users to execute arbitra (no CVSS)
- [CVE-2008-2902](https://cve.now/CVE-2008-2902.md): SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-2903](https://cve.now/CVE-2008-2903.md): SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic\_quotes\_gpc is disabled, al (no CVSS)
- [CVE-2008-2904](https://cve.now/CVE-2008-2904.md): SQL injection vulnerability in shop.php in Conkurent PHPMyCart allows remote attackers to execute arbitrary SQL commands via the cat paramet (no CVSS)
- [CVE-2008-2905](https://cve.now/CVE-2008-2905.md): PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache\_Lite package in Mambo 4.6.4 and earlier, when registe (no CVSS)
- [CVE-2008-2906](https://cve.now/CVE-2008-2906.md): SQL injection vulnerability in lista\_anexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the tsk\_id p (no CVSS)
- [CVE-2008-2907](https://cve.now/CVE-2008-2907.md): SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbi (no CVSS)
- [CVE-2008-2908](https://cve.now/CVE-2008-2908.md): Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remot (no CVSS)
- [CVE-2008-2909](https://cve.now/CVE-2008-2909.md): SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the searchtype p (no CVSS)
- [CVE-2008-2910](https://cve.now/CVE-2008-2910.md): Buffer overflow in the DXTTextOutEffect ActiveX control (aka the Text-Effect DXT Filter), as distributed in TextOut.dll 6.0.18.1 and mvtexto (no CVSS)
- [CVE-2008-2911](https://cve.now/CVE-2008-2911.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-2912](https://cve.now/CVE-2008-2912.md): Multiple PHP remote file inclusion vulnerabilities in Contenido CMS 4.8.4 allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2008-2913](https://cve.now/CVE-2008-2913.md): Directory traversal vulnerability in func.php in Devalcms 1.4a, when magic\_quotes\_gpc is disabled, allows remote attackers to include and ex (no CVSS)
- [CVE-2008-2914](https://cve.now/CVE-2008-2914.md): SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote attackers to execute ar (no CVSS)
- [CVE-2008-2915](https://cve.now/CVE-2008-2915.md): Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remote attackers to execut (no CVSS)
- [CVE-2008-2916](https://cve.now/CVE-2008-2916.md): Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic\_quotes\_gpc is disabled, allow remote attackers to execu (no CVSS)
- [CVE-2008-2917](https://cve.now/CVE-2008-2917.md): SQL injection vulnerability in productsofcat.asp in E-SMART CART allows remote attackers to execute arbitrary SQL commands via the category\_ (no CVSS)
- [CVE-2008-2918](https://cve.now/CVE-2008-2918.md): SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-2919](https://cve.now/CVE-2008-2919.md): SQL injection vulnerability in listing.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the sort p (no CVSS)
- [CVE-2008-2920](https://cve.now/CVE-2008-2920.md): admin/filemanager/ (aka the File Manager) in EZTechhelp EZCMS 1.2 and earlier does not require authentication, which allows remote attackers (no CVSS)
- [CVE-2008-2921](https://cve.now/CVE-2008-2921.md): SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2008-2922](https://cve.now/CVE-2008-2922.md): Stack-based buffer overflow in artegic Dana IRC client 1.3 and earlier allows remote attackers to cause a denial of service (application cra (no CVSS)
- [CVE-2008-2923](https://cve.now/CVE-2008-2923.md): Cross-site scripting (XSS) vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject a (no CVSS)
- [CVE-2008-2924](https://cve.now/CVE-2008-2924.md): Cross-site scripting (XSS) vulnerability in Webmatic before 2.8 allows remote attackers to inject arbitrary web script or HTML via unspecifi (no CVSS)
- [CVE-2008-2925](https://cve.now/CVE-2008-2925.md): SQL injection vulnerability in Webmatic before 2.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-06-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.