# CVEs published 2008-07-24

17 CVEs were published on July 24, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3291](https://cve.now/CVE-2008-3291.md): SQL injection vulnerability in index.php in AproxEngine (aka Aprox CMS Engine) 5.1.0.4 allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2008-3292](https://cve.now/CVE-2008-3292.md): constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbum (no CVSS)
- [CVE-2008-3293](https://cve.now/CVE-2008-3293.md): Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the dlfilename parameter (no CVSS)
- [CVE-2008-3294](https://cve.now/CVE-2008-3294.md): src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file ha (no CVSS)
- [CVE-2008-3285](https://cve.now/CVE-2008-3285.md): The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containin (no CVSS)
- [CVE-2008-3286](https://cve.now/CVE-2008-3286.md): SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) VERIFYCONTENT or (2) GAMECONFIG command (no CVSS)
- [CVE-2008-3287](https://cve.now/CVE-2008-3287.md): retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service (daemon crash) via malfor (no CVSS)
- [CVE-2008-3288](https://cve.now/CVE-2008-3288.md): The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a "weak hash algorithm," which makes it easier for conte (no CVSS)
- [CVE-2008-3289](https://cve.now/CVE-2008-3289.md): EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to ob (no CVSS)
- [CVE-2008-3290](https://cve.now/CVE-2008-3290.md): retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service (daemon crash) via a seri (no CVSS)
- [CVE-2008-3247](https://cve.now/CVE-2008-3247.md): The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x86\_64 platforms uses an incorrect size for ldt\_desc, which allows l (no CVSS)
- [CVE-2008-3264](https://cve.now/CVE-2008-3264.md): The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition (no CVSS)
- [CVE-2008-3265](https://cve.now/CVE-2008-3265.md): SQL injection vulnerability in the DT Register (com\_dtregister) 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2008-3266](https://cve.now/CVE-2008-3266.md): SQL injection vulnerability in picture\_pic\_bv.asp in SoftAcid Hotel Reservation System (HRS) Multi allows remote attackers to execute arbitr (no CVSS)
- [CVE-2008-3267](https://cve.now/CVE-2008-3267.md): SQL injection vulnerability in mojoJobs.cgi in MojoJobs allows remote attackers to execute arbitrary SQL commands via the cat\_a parameter. (no CVSS)
- [CVE-2008-3268](https://cve.now/CVE-2008-3268.md): Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers with administrator ema (no CVSS)
- [CVE-2008-3269](https://cve.now/CVE-2008-3269.md): WRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers to cause a denial of service (CPU consumpt (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-07-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.