CVE-2008-1351: SQL Injection
SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1351?
CVE-2008-1351 is classified as a medium severity vulnerability due to its potential to allow SQL injection attacks.
How do I fix CVE-2008-1351?
To fix CVE-2008-1351, update the Tutorials module for XOOPS to a version that patches the SQL injection vulnerability.
What type of attacks can exploit CVE-2008-1351?
CVE-2008-1351 can be exploited by remote attackers to execute arbitrary SQL commands against the affected application.
Which software versions are affected by CVE-2008-1351?
CVE-2008-1351 specifically affects the Tutorials module version 2.1b for XOOPS.
How does CVE-2008-1351 impact users?
CVE-2008-1351 may lead to unauthorized data access and manipulation, compromising the integrity of the database.