CVE-2008-3351: SQL Injection
Published Jul 28, 2008
·Updated
SQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows remote attackers to execute arbitrary SQL commands via the photoId parameter in a show action.
Affected Software
2 affected components
atomPhotoBlog atomPhotoBlog=1.0.9.1
atomPhotoBlog atomPhotoBlog=1.1.5-b1
Event History
Jul 28, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3351?
The severity of CVE-2008-3351 is rated high with a score of 7.5.
2
How can I fix CVE-2008-3351?
To fix CVE-2008-3351, you should patch the Atom PhotoBlog to the latest version that resolves this SQL injection vulnerability.
3
What kind of attack does CVE-2008-3351 allow?
CVE-2008-3351 allows remote attackers to execute arbitrary SQL commands through the photoId parameter.
4
Which software is affected by CVE-2008-3351?
The versions of Atom PhotoBlog affected by CVE-2008-3351 are 1.0.9.1 and 1.1.5b1.
5
What is the nature of the vulnerability in CVE-2008-3351?
CVE-2008-3351 is an SQL injection vulnerability that can lead to unauthorized access to the database.