CVE-2008-5733: SQL Injection
Published Dec 26, 2008
·Updated
SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Software
4 affected components
PHP-Fusion Team Impact Ti Blog System Module
PHP-Fusion php-fusion
All of the following
PHP-Fusion Team Impact Ti Blog System Module
PHP-Fusion php-fusion
Event History
Dec 26, 2008
CVE Published
via MITRE·05:08 PM
Data Sourced
via MITRE·05:08 PM
Description
Data Sourced
05:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·05:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5733?
CVE-2008-5733 is classified as a high severity vulnerability due to the potential for remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2008-5733?
To fix CVE-2008-5733, you should validate and sanitize user input for the id parameter in the blog.php script to prevent SQL injection.
3
What systems are affected by CVE-2008-5733?
CVE-2008-5733 affects the Team Impact TI Blog System module for PHP-Fusion.
4
What type of vulnerability is CVE-2008-5733?
CVE-2008-5733 is an SQL injection vulnerability, which allows attackers to manipulate SQL queries.
5
Can CVE-2008-5733 be exploited remotely?
Yes, CVE-2008-5733 can be exploited remotely by attackers who can send crafted requests to the affected blog.php file.