CVE-2008-2095: SQL Injection
Published May 6, 2008
·Updated
SQL injection vulnerability in index.php in the FlippingBook (comflippingbook) 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the bookid parameter.
Affected Software
3 affected components
Page-flip-tools Flipping Book=1.0.4
Mambo Com Flippingbook=1.0.4
Joomla Com Flippingbook=1.0.4
Event History
May 6, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2095?
The severity of CVE-2008-2095 is typically considered high due to the potential for remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2008-2095?
To fix CVE-2008-2095, update the FlippingBook component to a version that addresses the SQL injection vulnerability.
3
What systems are affected by CVE-2008-2095?
CVE-2008-2095 affects FlippingBook 1.0.4 component for Joomla!, Mambo, and Page-flip-tools.
4
Can CVE-2008-2095 be exploited without authentication?
Yes, CVE-2008-2095 can be exploited by remote attackers without requiring authentication.
5
What are the possible consequences of exploiting CVE-2008-2095?
Exploiting CVE-2008-2095 may result in unauthorized access to the database, data corruption, or data theft.