CVE-2008-3351: SQL Injection

Published Jul 28, 2008

Updated

SQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows remote attackers to execute arbitrary SQL commands via the photoId parameter in a show action.

Affected Software

2 affected components

atomPhotoBlog atomPhotoBlog=1.0.9.1

atomPhotoBlog atomPhotoBlog=1.1.5-b1

Event History

Jul 28, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3351?

The severity of CVE-2008-3351 is rated high with a score of 7.5.

How can I fix CVE-2008-3351?

To fix CVE-2008-3351, you should patch the Atom PhotoBlog to the latest version that resolves this SQL injection vulnerability.

What kind of attack does CVE-2008-3351 allow?

CVE-2008-3351 allows remote attackers to execute arbitrary SQL commands through the photoId parameter.

Which software is affected by CVE-2008-3351?

The versions of Atom PhotoBlog affected by CVE-2008-3351 are 1.0.9.1 and 1.1.5b1.

What is the nature of the vulnerability in CVE-2008-3351?

CVE-2008-3351 is an SQL injection vulnerability that can lead to unauthorized access to the database.

CVE-2008-3351: SQL Injection

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2008-3351?

How can I fix CVE-2008-3351?

What kind of attack does CVE-2008-3351 allow?

Which software is affected by CVE-2008-3351?

What is the nature of the vulnerability in CVE-2008-3351?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2008-3351?

How can I fix CVE-2008-3351?

What kind of attack does CVE-2008-3351 allow?

Which software is affected by CVE-2008-3351?

What is the nature of the vulnerability in CVE-2008-3351?