CVE-2008-5195: SQL Injection
Multiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute arbitrary SQL commands via (1) the recid parameter to cms/form/read.php, (2) the uname parameter to cms/index.php, and other unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What are the SQL injection vulnerabilities in CVE-2008-5195?
CVE-2008-5195 includes multiple SQL injection vulnerabilities that allow attackers to execute arbitrary SQL commands via the recid parameter in cms/form/read.php and the uname parameter in cms/index.php.
What software versions are affected by CVE-2008-5195?
CVE-2008-5195 specifically affects SebracCMS version 0.4.
How can I mitigate the risks associated with CVE-2008-5195?
To mitigate risks associated with CVE-2008-5195, users should upgrade to a patched version of SebracCMS or implement input validation and prepared statements to prevent SQL injection.
What types of attacks can be performed using the vulnerabilities in CVE-2008-5195?
Exploiting the vulnerabilities in CVE-2008-5195 can allow attackers to gain unauthorized access to the database and execute arbitrary SQL queries.
Are there any known exploits for CVE-2008-5195?
Yes, there are documented exploits that take advantage of the SQL injection vulnerabilities identified in CVE-2008-5195.