CVE-2008-0920: SQL Injection
SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0920?
CVE-2008-0920 is classified as a high severity vulnerability due to its potential for remote code execution through SQL injection.
How do I fix CVE-2008-0920?
To fix CVE-2008-0920, ensure that input validation is properly implemented for the portname parameter to prevent SQL injection.
Who is affected by CVE-2008-0920?
CVE-2008-0920 affects users of Open Source Security Information Management (OSSIM) version 0.9.9 rc5 and earlier.
What type of vulnerability is CVE-2008-0920?
CVE-2008-0920 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
Can CVE-2008-0920 be exploited remotely?
Yes, CVE-2008-0920 can be exploited remotely by authenticated users who can manipulate the portname parameter.