CVE-2008-2455: SQL Injection
Published May 27, 2008
·Updated
SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the rid parameter.
Affected Software
1 affected component
E107coders E107 Blog Engine=2.2
Event History
May 27, 2008
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2455?
CVE-2008-2455 has been classified as a medium severity vulnerability due to its potential for SQL injection attacks.
2
How do I fix CVE-2008-2455?
To fix CVE-2008-2455, you should update the e107 BLOG Engine plugin to the latest version that addresses this SQL injection vulnerability.
3
What type of attack is possible with CVE-2008-2455?
CVE-2008-2455 allows remote attackers to execute arbitrary SQL commands due to an SQL injection vulnerability.
4
Which version of e107 is affected by CVE-2008-2455?
The affected version of e107 is specifically 2.2 of the e107 BLOG Engine plugin.
5
Can CVE-2008-2455 be exploited without authentication?
Yes, CVE-2008-2455 can be exploited by unauthenticated remote attackers since it affects a publicly accessible script.