CVE-2008-2034: SQL Injection

Published Apr 30, 2008

Updated

SQL injection vulnerability in wp-downloadmonitor/download.php in the Download Monitor 2.0.6 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

WordPress Download Monitor Plugin=2.0.6

Event History

Apr 30, 2008

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2034?

CVE-2008-2034 is classified as a high severity vulnerability due to its potential for remote SQL injection attacks.

How do I fix CVE-2008-2034?

To fix CVE-2008-2034, update the Download Monitor plugin for WordPress to a version newer than 2.0.6.

What systems are affected by CVE-2008-2034?

CVE-2008-2034 affects the Download Monitor plugin version 2.0.6 for WordPress.

What type of vulnerability is CVE-2008-2034?

CVE-2008-2034 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.

Can CVE-2008-2034 be exploited remotely?

Yes, CVE-2008-2034 can be exploited remotely, allowing attackers to manipulate the database without authentication.