# CVEs published 2008-07-02

34 CVEs were published on July 2, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2959](https://cve.now/CVE-2008-2959.md): Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might allow remote attackers (no CVSS)
- [CVE-2008-2960](https://cve.now/CVE-2008-2960.md): Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.11.7, when register\_globals is enabled and .htaccess support is disabled, al (no CVSS)
- [CVE-2008-2961](https://cve.now/CVE-2008-2961.md): Multiple directory traversal vulnerabilities in view/index.php in CMS Mini 0.2.2 allow remote attackers to read arbitrary local files via a (no CVSS)
- [CVE-2008-2962](https://cve.now/CVE-2008-2962.md): Multiple cross-site scripting (XSS) vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or HTML via the (1) s an (no CVSS)
- [CVE-2008-2963](https://cve.now/CVE-2008-2963.md): Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) (no CVSS)
- [CVE-2008-2964](https://cve.now/CVE-2008-2964.md): SQL injection vulnerability in guide.php in ResearchGuide 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter (no CVSS)
- [CVE-2008-2965](https://cve.now/CVE-2008-2965.md): Cross-site scripting (XSS) vulnerability in viewforum.php in JaxUltraBB (JUBB) 2.0 and earlier allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2008-2966](https://cve.now/CVE-2008-2966.md): Directory traversal vulnerability in viewprofile.php in JaxUltraBB 2.0 and earlier allows remote attackers to read arbitrary local files via (no CVSS)
- [CVE-2008-2967](https://cve.now/CVE-2008-2967.md): Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attacke (no CVSS)
- [CVE-2008-2968](https://cve.now/CVE-2008-2968.md): SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to exe (no CVSS)
- [CVE-2008-2969](https://cve.now/CVE-2008-2969.md): Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attacker (no CVSS)
- [CVE-2008-2970](https://cve.now/CVE-2008-2970.md): Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hija (no CVSS)
- [CVE-2008-2971](https://cve.now/CVE-2008-2971.md): SQL injection vulnerability in links-extern.php in CiBlog 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter (no CVSS)
- [CVE-2008-2972](https://cve.now/CVE-2008-2972.md): SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the cat\_id parameter in a (no CVSS)
- [CVE-2008-2973](https://cve.now/CVE-2008-2973.md): Multiple cross-site scripting (XSS) vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-2974](https://cve.now/CVE-2008-2974.md): Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when register\_globals is enabled, allows remote attackers to include and (no CVSS)
- [CVE-2008-2975](https://cve.now/CVE-2008-2975.md): Cross-site scripting (XSS) vulnerability in admin/objects/obj\_image.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2008-2976](https://cve.now/CVE-2008-2976.md): Multiple directory traversal vulnerabilities in TinX/cms 1.1, when register\_globals is enabled, allow remote attackers to include and execut (no CVSS)
- [CVE-2008-2977](https://cve.now/CVE-2008-2977.md): Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2008-2978](https://cve.now/CVE-2008-2978.md): Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when register\_globals is enabled, allows remote attackers to include (no CVSS)
- [CVE-2008-2979](https://cve.now/CVE-2008-2979.md): Multiple cross-site scripting (XSS) vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-2980](https://cve.now/CVE-2008-2980.md): Multiple cross-site scripting (XSS) vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-2981](https://cve.now/CVE-2008-2981.md): PHP remote file inclusion vulnerability in admin/templates/template\_thumbnail.php in HomePH Design 2.10 RC2, when register\_globals is enable (no CVSS)
- [CVE-2008-2982](https://cve.now/CVE-2008-2982.md): Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when register\_globals is enabled, allow remote attackers to include (no CVSS)
- [CVE-2008-2983](https://cve.now/CVE-2008-2983.md): SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter (no CVSS)
- [CVE-2008-2984](https://cve.now/CVE-2008-2984.md): Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-2985](https://cve.now/CVE-2008-2985.md): Directory traversal vulnerability in load\_language.php in CMReams CMS 1.3.1.1 Beta 2, when register\_globals is enabled, allows remote attack (no CVSS)
- [CVE-2008-2986](https://cve.now/CVE-2008-2986.md): Multiple PHP remote file inclusion vulnerabilities in phpDMCA 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the ou (no CVSS)
- [CVE-2008-2987](https://cve.now/CVE-2008-2987.md): Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the P (no CVSS)
- [CVE-2008-2988](https://cve.now/CVE-2008-2988.md): Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP file (no CVSS)
- [CVE-2008-2989](https://cve.now/CVE-2008-2989.md): SQL injection vulnerability in index.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary SQL commands via the go parameter. (no CVSS)
- [CVE-2008-2990](https://cve.now/CVE-2008-2990.md): PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com\_facileforms) component 1.4.4 for Mambo and Joomla! (no CVSS)
- [CVE-2008-2372](https://cve.now/CVE-2008-2372.md): The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number o (no CVSS)
- [CVE-2008-2826](https://cve.now/CVE-2008-2826.md): Integer overflow in the sctp\_getsockopt\_local\_addrs\_old function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) fun (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-07-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.