CVE-2008-1404: SQL Injection
Published Mar 20, 2008
·Updated
SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter.
Affected Software
1 affected component
eXV2 eXV2=2.0.3
Event History
Mar 20, 2008
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1404?
CVE-2008-1404 is classified as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2008-1404?
To fix CVE-2008-1404, ensure you update the Viso module to a version that has addressed the SQL injection flaw.
3
Which versions of eXV2 are affected by CVE-2008-1404?
CVE-2008-1404 affects the Viso module in eXV2 versions 2.04 and 2.03.
4
What impact does CVE-2008-1404 have on affected systems?
The impact of CVE-2008-1404 allows attackers to manipulate SQL queries, potentially leading to data breaches or loss.
5
Is CVE-2008-1404 a known vulnerability?
Yes, CVE-2008-1404 is a publicly disclosed SQL injection vulnerability known in the cybersecurity community.