CVE-2008-5796: SQL Injection
Published Dec 31, 2008
·Updated
SQL injection vulnerability in the eluna Page Comments (elunapagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
4 affected components
Typo3 Eluna Page Comments Extension<=1.1.2
Typo3 TYPO3
All of the following
Typo3 Eluna Page Comments Extension<=1.1.2
Typo3 TYPO3
Event History
Dec 31, 2008
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
11:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·11:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5796?
CVE-2008-5796 is classified as a high severity vulnerability due to the potential for remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2008-5796?
To fix CVE-2008-5796, you should upgrade the eluna Page Comments extension to version 1.1.3 or above.
3
Which versions of the eluna Page Comments extension are affected by CVE-2008-5796?
CVE-2008-5796 affects eluna Page Comments extension versions 1.1.2 and earlier.
4
Can CVE-2008-5796 be exploited remotely?
Yes, CVE-2008-5796 can be exploited remotely, allowing attackers to execute arbitrary SQL commands.
5
Is TYPO3 itself vulnerable due to CVE-2008-5796?
No, the TYPO3 core is not vulnerable; only the eluna Page Comments extension is affected.