CVE-2008-2094: SQL Injection
Published May 6, 2008
·Updated
SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Software
1 affected component
Xoops Article module
Event History
May 6, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2094?
CVE-2008-2094 has a medium severity due to its potential for SQL injection attacks.
2
How do I fix CVE-2008-2094?
To fix CVE-2008-2094, update the XOOPS Article module to a patched version that mitigates SQL injection vulnerabilities.
3
What type of vulnerability is CVE-2008-2094?
CVE-2008-2094 is classified as an SQL injection vulnerability.
4
What specific parameter is affected in CVE-2008-2094?
The vulnerability in CVE-2008-2094 affects the 'id' parameter in article.php.
5
Who can be affected by CVE-2008-2094?
Any remote attacker can exploit CVE-2008-2094 if the affected XOOPS Article module version is in use.