# CVEs published 2008-07-03 9 CVEs were published on July 3, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-2993](https://cve.now/CVE-2008-2993.md): Multiple directory traversal vulnerabilities in index.php in FOG Forum 0.8.1 allow remote attackers to include and execute arbitrary local f (no CVSS) - [CVE-2008-2994](https://cve.now/CVE-2008-2994.md): Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via t (no CVSS) - [CVE-2008-2995](https://cve.now/CVE-2008-2995.md): Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via (1) the annuaire pa (no CVSS) - [CVE-2008-2996](https://cve.now/CVE-2008-2996.md): Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic\_quotes\_gpc is disabled, allow remote attac (no CVSS) - [CVE-2008-2997](https://cve.now/CVE-2008-2997.md): Cross-site scripting (XSS) vulnerability in index.php in Gravity Board X (GBX) 2.0 Beta allows remote attackers to inject arbitrary web scri (no CVSS) - [CVE-2008-2998](https://cve.now/CVE-2008-2998.md): Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to inject (no CVSS) - [CVE-2008-2999](https://cve.now/CVE-2008-2999.md): Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary S (no CVSS) - [CVE-2008-3000](https://cve.now/CVE-2008-3000.md): The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which a (no CVSS) - [CVE-2008-3001](https://cve.now/CVE-2008-3001.md): The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-07-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.