CVE-2008-5197: SQL Injection
Published Nov 21, 2008
·Updated
SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detailadverts action.
Affected Software
1 affected component
PHP-Fusion php-fusion
Event History
Nov 21, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5197?
CVE-2008-5197 is classified as a medium severity SQL injection vulnerability.
2
How do I fix CVE-2008-5197?
To fix CVE-2008-5197, you should sanitize and validate the lid parameter in the classifieds.php file before using it in SQL queries.
3
What are the implications of exploiting CVE-2008-5197?
Exploiting CVE-2008-5197 allows remote attackers to execute arbitrary SQL commands, potentially compromising the database.
4
Which versions of PHP-Fusion are affected by CVE-2008-5197?
CVE-2008-5197 affects all versions of PHP-Fusion prior to fixing the vulnerability.
5
How can I detect if my application is vulnerable to CVE-2008-5197?
You can detect if your application is vulnerable to CVE-2008-5197 by testing for SQL injection through the lid parameter in the detail_adverts action.