CVE-2008-1936: SQL Injection
Published Apr 24, 2008
·Updated
SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the catid parameter in an add action. NOTE: this issue might be site-specific.
Affected Software
1 affected component
Classifieds Caffe Classifieds Caffe
Event History
Apr 24, 2008
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1936?
CVE-2008-1936 is considered a medium severity vulnerability due to its potential to allow remote SQL command execution.
2
How do I fix CVE-2008-1936?
To fix CVE-2008-1936, validate and sanitize the cat_id parameter to prevent SQL injection.
3
What systems are affected by CVE-2008-1936?
CVE-2008-1936 affects Classifieds Caffe software versions that include vulnerable instances of index.php.
4
Can CVE-2008-1936 lead to data breaches?
Yes, CVE-2008-1936 can lead to data breaches by allowing attackers to execute arbitrary SQL commands.
5
Is CVE-2008-1936 a site-specific issue?
Yes, CVE-2008-1936 might be site-specific depending on the implementation of the Classifieds Caffe software.