# CVEs published 2008-07-22

12 CVEs were published on July 22, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3263](https://cve.now/CVE-2008-3263.md): The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x. (no CVSS)
- [CVE-2008-3260](https://cve.now/CVE-2008-3260.md): Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-3261](https://cve.now/CVE-2008-3261.md): Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary we (no CVSS)
- [CVE-2008-3262](https://cve.now/CVE-2008-3262.md): Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a (no CVSS)
- [CVE-2008-3188](https://cve.now/CVE-2008-3188.md): libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attacke (no CVSS)
- [CVE-2008-3253](https://cve.now/CVE-2008-3253.md): Cross-site scripting (XSS) vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition 4.1.0; (no CVSS)
- [CVE-2008-3254](https://cve.now/CVE-2008-3254.md): SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a Use (no CVSS)
- [CVE-2008-3255](https://cve.now/CVE-2008-3255.md): Cross-site scripting (XSS) vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-3256](https://cve.now/CVE-2008-3256.md): SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attack (no CVSS)
- [CVE-2008-3257](https://cve.now/CVE-2008-3257.md): Stack-based buffer overflow in the Apache Connector (mod\_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allow (no CVSS)
- [CVE-2008-3258](https://cve.now/CVE-2008-3258.md): Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute arbitrary SQL commands via unspecified vecto (no CVSS)
- [CVE-2008-3259](https://cve.now/CVE-2008-3259.md): OpenSSH before 5.1 sets the SO\_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-07-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.