CVE-2008-4786: SQL Injection
Published Oct 29, 2008
·Updated
SQL injection vulnerability in easyshop.php in the EasyShop plugin for e107 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter.
Affected Software
2 affected components
e107 e107
e107 EasyShop plugin
Event History
Oct 29, 2008
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
02:22 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-4786?
CVE-2008-4786 has a medium severity level due to the potential for remote SQL command execution.
2
How do I fix CVE-2008-4786?
To fix CVE-2008-4786, update the EasyShop plugin for e107 to the latest secure version.
3
What systems are affected by CVE-2008-4786?
CVE-2008-4786 affects the EasyShop plugin for e107 CMS.
4
What is the nature of the vulnerability in CVE-2008-4786?
CVE-2008-4786 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
5
Can CVE-2008-4786 lead to data compromise?
Yes, CVE-2008-4786 can lead to data compromise by allowing unauthorized access to the database.