# CVEs published 2008-07-16

9 CVEs were published on July 16, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3145](https://cve.now/CVE-2008-3145.md): The fragment\_add\_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2008-3189](https://cve.now/CVE-2008-3189.md): SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2008-3190](https://cve.now/CVE-2008-3190.md): Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files (no CVSS)
- [CVE-2008-3191](https://cve.now/CVE-2008-3191.md): Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic\_quotes\_gpc is disabled, allow remote attackers to execute ar (no CVSS)
- [CVE-2008-3192](https://cve.now/CVE-2008-3192.md): Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. (no CVSS)
- [CVE-2008-3193](https://cve.now/CVE-2008-3193.md): SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default (no CVSS)
- [CVE-2008-3194](https://cve.now/CVE-2008-3194.md): Multiple directory traversal vulnerabilities in data/inc/themes/predefined\_variables.php in pluck 4.5.1 allow remote attackers to include an (no CVSS)
- [CVE-2008-3196](https://cve.now/CVE-2008-3196.md): skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to c (no CVSS)
- [CVE-2008-3197](https://cve.now/CVE-2008-3197.md): Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-07-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.