CVE-2008-2487: SQL Injection
Published May 28, 2008
·Updated
SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action.
Affected Software
1 affected component
Maxsite MAXSITE<=1.10
Event History
May 28, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2487?
CVE-2008-2487 is considered a high-severity vulnerability due to the potential for remote SQL command execution.
2
How do I fix CVE-2008-2487?
To fix CVE-2008-2487, upgrade to a version of MAXSITE that is later than 1.10, which addresses this SQL injection vulnerability.
3
What are the potential impacts of CVE-2008-2487?
The potential impacts of CVE-2008-2487 include unauthorized access to the database and execution of arbitrary SQL queries.
4
Which versions of MAXSITE are affected by CVE-2008-2487?
MAXSITE versions 1.10 and earlier are affected by CVE-2008-2487.
5
What is the cause of the vulnerability CVE-2008-2487?
CVE-2008-2487 is caused by insufficient input validation in the category parameter of the webboard action in index.php.