CVE-2008-0451: SQL Injection
Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) siteadmin/article-edit.php; and unspecified parameters to (2) submitted-edit.php, (3) page-edit.php, (4) section-edit.php, (5) staff-edit.php, and (6) staff-access.php in siteadmin/.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0451?
CVE-2008-0451 has a medium severity rating due to its potential for enabling unauthorized access to sensitive data through SQL injection.
How do I fix CVE-2008-0451?
To fix CVE-2008-0451, update PacerCMS to a version beyond 0.6 where the SQL injection vulnerabilities have been addressed.
Who is affected by CVE-2008-0451?
CVE-2008-0451 affects users of PacerCMS version 0.6 who have remote authenticated access.
What type of vulnerabilities are present in CVE-2008-0451?
CVE-2008-0451 presents multiple SQL injection vulnerabilities that allow potential execution of arbitrary SQL commands.
What components of PacerCMS are vulnerable in CVE-2008-0451?
The vulnerable components in CVE-2008-0451 include siteadmin/article-edit.php and various editing scripts like submitted-edit.php and page-edit.php.