CVE-2008-4991: SQL Injection
SQL injection vulnerability in LOCKON CO.,LTD. EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, and 1.5.0-beta2 and earlier; and Community Edition 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4991?
CVE-2008-4991 is classified as a high-severity SQL injection vulnerability.
How do I fix CVE-2008-4991?
To fix CVE-2008-4991, upgrade your EC-CUBE installation to version 2.3.1 or later.
What types of systems are affected by CVE-2008-4991?
CVE-2008-4991 affects versions of EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, and related Community Edition versions.
What can happen if CVE-2008-4991 is exploited?
If CVE-2008-4991 is exploited, attackers can execute arbitrary SQL commands, potentially leading to data compromise.
Is there a workaround for CVE-2008-4991 if I cannot update?
If unable to update, consider implementing input validation to sanitize user inputs to mitigate the risk of SQL injection from CVE-2008-4991.