CVE-2008-2626: SQL Injection
Published Jun 10, 2008
·Updated
SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter.
Affected Software
10 affected components
BattleBlog BattleBlog=1.20-build_2
BattleBlog BattleBlog=1.0d-build_5
BattleBlog BattleBlog=1.0d-build_3
BattleBlog BattleBlog=1.0d-build_4
BattleBlog BattleBlog=1.0d-build_5a
BattleBlog BattleBlog<=1.25
BattleBlog BattleBlog=1.0d-build_6
BattleBlog BattleBlog=1.20-build_3
BattleBlog BattleBlog=1.05-build_1
BattleBlog BattleBlog=1.20-build_1
Event History
Jun 10, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2626?
CVE-2008-2626 has a medium severity rating due to the potential for SQL injection allowing remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2008-2626?
To fix CVE-2008-2626, update your Battle Blog software to version 1.26 or later, which includes the necessary patches.
3
What versions of Battle Blog are affected by CVE-2008-2626?
CVE-2008-2626 affects Battle Blog versions 1.25 and earlier.
4
Can CVE-2008-2626 lead to unauthorized data access?
Yes, CVE-2008-2626 can lead to unauthorized data access and manipulation through SQL injection.
5
Is CVE-2008-2626 a common vulnerability?
Yes, SQL injection vulnerabilities like CVE-2008-2626 are common and represent a significant threat to web applications.