First published: Fri Aug 22 2008(Updated: )
SQL injection vulnerability in index.php in Simasy CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Simasy CMS |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-3774 has a moderate severity rating due to the potential for remote attackers to execute arbitrary SQL commands.
To fix CVE-2008-3774, validate and sanitize the input received from the id parameter before processing SQL queries.
CVE-2008-3774 affects Simasy CMS versions listed in the vulnerability report.
Yes, CVE-2008-3774 can be exploited remotely by attackers to gain control over the database server.
CVE-2008-3774 is classified as an SQL injection vulnerability.