# CVEs published 2008-07-11

12 CVEs were published on July 11, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3151](https://cve.now/CVE-2008-3151.md): SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id par (no CVSS)
- [CVE-2008-3152](https://cve.now/CVE-2008-3152.md): SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-3153](https://cve.now/CVE-2008-3153.md): SQL injection vulnerability in Triton CMS Pro allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header. (no CVSS)
- [CVE-2008-3154](https://cve.now/CVE-2008-3154.md): SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter (no CVSS)
- [CVE-2008-3155](https://cve.now/CVE-2008-3155.md): Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to cause a deni (no CVSS)
- [CVE-2008-3156](https://cve.now/CVE-2008-3156.md): The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary c (no CVSS)
- [CVE-2008-3157](https://cve.now/CVE-2008-3157.md): Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a (no CVSS)
- [CVE-2008-3158](https://cve.now/CVE-2008-3158.md): Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, possibly related to IOCTL (no CVSS)
- [CVE-2008-3147](https://cve.now/CVE-2008-3147.md): WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores (1) WEP, (2) WPA, and (3) WPA2 access-point keys in (a) ClientWeFiLog.dat, (b) Clien (no CVSS)
- [CVE-2008-3148](https://cve.now/CVE-2008-3148.md): Stack-based buffer overflow in (1) OllyDBG 1.10 and (2) ImpREC 1.7f allows user-assisted attackers to execute arbitrary code via a crafted D (no CVSS)
- [CVE-2008-3149](https://cve.now/CVE-2008-3149.md): The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service (daemon crash) by walking the hr (no CVSS)
- [CVE-2008-3150](https://cve.now/CVE-2008-3150.md): Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonst (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-07-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.