# CVEs published 2008-07-30 27 CVEs were published on July 30, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-3380](https://cve.now/CVE-2008-3380.md): Cross-site scripting (XSS) vulnerability in ajaxp\_backend.php in MyioSoft EasyBookMarker 4.0 trial edition (tr) allows remote attackers to i (no CVSS) - [CVE-2008-3381](https://cve.now/CVE-2008-3381.md): Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers (no CVSS, moin) - [CVE-2008-3382](https://cve.now/CVE-2008-3382.md): SQL injection vulnerability in mojoClassified.cgi in MojoClassifieds 2.0 allows remote attackers to execute arbitrary SQL commands via the c (no CVSS) - [CVE-2008-3383](https://cve.now/CVE-2008-3383.md): SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via the cat\_a parameter in (no CVSS) - [CVE-2008-3384](https://cve.now/CVE-2008-3384.md): Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attacke (no CVSS) - [CVE-2008-3385](https://cve.now/CVE-2008-3385.md): Directory traversal vulnerability in include/head\_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attackers to include and exe (no CVSS) - [CVE-2008-3386](https://cve.now/CVE-2008-3386.md): SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2008-3387](https://cve.now/CVE-2008-3387.md): SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the dbtable paramet (no CVSS) - [CVE-2008-3388](https://cve.now/CVE-2008-3388.md): Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via the article parameter (no CVSS) - [CVE-2008-3365](https://cve.now/CVE-2008-3365.md): Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register\_globals is enabled, allows remote attackers to i (no CVSS) - [CVE-2008-3366](https://cve.now/CVE-2008-3366.md): SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parame (no CVSS) - [CVE-2008-3367](https://cve.now/CVE-2008-3367.md): Cross-site scripting (XSS) vulnerability in RTE\_popup\_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03 allows remote attac (no CVSS) - [CVE-2008-3368](https://cve.now/CVE-2008-3368.md): PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrat (no CVSS) - [CVE-2008-3369](https://cve.now/CVE-2008-3369.md): SQL injection vulnerability in products\_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2008-3370](https://cve.now/CVE-2008-3370.md): SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access (CUA) 4.0\_4735.p4 allows remote attackers to execute arb (no CVSS) - [CVE-2008-3371](https://cve.now/CVE-2008-3371.md): Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to inclu (no CVSS) - [CVE-2008-3372](https://cve.now/CVE-2008-3372.md): SQL injection vulnerability in search\_form.php in Getacoder Clone allows remote attackers to execute arbitrary SQL commands via the sb\_proty (no CVSS) - [CVE-2008-3373](https://cve.now/CVE-2008-3373.md): The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service (engine crash) via a (no CVSS) - [CVE-2008-3374](https://cve.now/CVE-2008-3374.md): SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the rsa (no CVSS) - [CVE-2008-3375](https://cve.now/CVE-2008-3375.md): The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain adm (no CVSS) - [CVE-2008-3376](https://cve.now/CVE-2008-3376.md): Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors. (no CVSS) - [CVE-2008-3377](https://cve.now/CVE-2008-3377.md): SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the image\_id param (no CVSS) - [CVE-2008-3378](https://cve.now/CVE-2008-3378.md): SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid paramet (no CVSS) - [CVE-2008-3379](https://cve.now/CVE-2008-3379.md): Cross-site scripting (XSS) vulnerability in Snark VisualPic 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the pic (no CVSS) - [CVE-2008-3362](https://cve.now/CVE-2008-3362.md): Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attacke (no CVSS) - [CVE-2008-3363](https://cve.now/CVE-2008-3363.md): Directory traversal vulnerability in user\_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and (no CVSS) - [CVE-2008-3364](https://cve.now/CVE-2008-3364.md): Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OS (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-07-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.