First published: Fri May 09 2008(Updated: )
SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
fipsASP fipsCMS | =2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-2124 is classified as a high-severity SQL injection vulnerability.
To fix CVE-2008-2124, validate and sanitize all user inputs, especially the 'lg' parameter, and apply security patches provided by fipsASP.
CVE-2008-2124 allows remote attackers to execute arbitrary SQL commands, potentially compromising your database.
CVE-2008-2124 affects fipsCMS version 2.1.
Yes, implementing prepared statements and parameterized queries can help prevent SQL injection vulnerabilities like CVE-2008-2124.