CVE-2008-5797: SQL Injection
Published Dec 31, 2008
·Updated
SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
4 affected components
Typo3 advCalendar extension<=0.3.1
Typo3 TYPO3
All of the following
Typo3 advCalendar extension<=0.3.1
Typo3 TYPO3
Event History
Dec 31, 2008
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
11:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·11:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5797?
The severity of CVE-2008-5797 is considered high due to its SQL injection nature allowing remote command execution.
2
How do I fix CVE-2008-5797?
To fix CVE-2008-5797, upgrade the advCalendar extension to version 0.3.2 or later, which addresses this vulnerability.
3
What versions are affected by CVE-2008-5797?
CVE-2008-5797 affects advCalendar extension version 0.3.1 and earlier for TYPO3.
4
Can CVE-2008-5797 be exploited without authentication?
Yes, CVE-2008-5797 can potentially be exploited by unauthenticated remote attackers via unspecified vectors.
5
What are the potential consequences of exploiting CVE-2008-5797?
Exploiting CVE-2008-5797 could allow attackers to execute arbitrary SQL commands, potentially compromising the database.