CVE-2008-4706: SQL Injection

Published Oct 23, 2008

Updated

SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute arbitrary SQL commands via the mapid parameter in a showdetails action to (1) vbgooglemaphse.php and (2) mapa.php.

Affected Software

1 affected component

vBulletin VBGooglemap=1.0.3

Event History

Oct 23, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4706?

CVE-2008-4706 is classified as a medium severity vulnerability due to its potential for remote SQL command execution.

How do I fix CVE-2008-4706?

To fix CVE-2008-4706, upgrade to a patched version of the VBGooglemap Hotspot Edition module beyond 1.0.3.

What software is affected by CVE-2008-4706?

CVE-2008-4706 affects VBGooglemap Hotspot Edition version 1.0.3, which is a module for vBulletin.

Can CVE-2008-4706 lead to data breaches?

Yes, CVE-2008-4706 can lead to data breaches as it allows attackers to execute arbitrary SQL commands, potentially exposing sensitive data.

What actions should I take if my system is vulnerable to CVE-2008-4706?

If your system is vulnerable to CVE-2008-4706, it is critical to apply the latest updates and patches immediately and review logs for any unauthorized access.