CVE-2008-0811: SQL Injection

Published Feb 19, 2008

Updated

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1) the kid parameter to (a) mod/dl.php or (b) mod/links.php, and (2) the query parameter to search.php.

Affected Software

1 affected component

AuraCMS AuraCMS=1.62

Event History

Feb 19, 2008

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0811?

CVE-2008-0811 is classified as a critical vulnerability due to its potential for arbitrary SQL command execution.

How do I fix CVE-2008-0811?

To fix CVE-2008-0811, you should update to a patched version of AuraCMS that resolves the SQL injection vulnerabilities.

Which components are affected by CVE-2008-0811?

CVE-2008-0811 affects mod/dl.php, mod/links.php, and search.php in AuraCMS version 1.62.

What kind of attacks can CVE-2008-0811 enable?

CVE-2008-0811 can enable remote attackers to execute arbitrary SQL commands, potentially compromising the database.

Is CVE-2008-0811 present in versions of AuraCMS other than 1.62?

CVE-2008-0811 specifically affects AuraCMS version 1.62 and may not be applicable to other versions.