CVE-2008-5798: SQL Injection
Published Dec 31, 2008
·Updated
SQL injection vulnerability in the CMS Poll system (cmspoll) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
4 affected components
Typo3 Cms Poll System Extension<=0.1.0
Typo3 TYPO3
All of the following
Typo3 Cms Poll System Extension<=0.1.0
Typo3 TYPO3
Remediation
Event History
Dec 31, 2008
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
11:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·11:30 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5798?
CVE-2008-5798 is classified as a critical vulnerability due to its potential for remote SQL command execution.
2
How do I fix CVE-2008-5798?
To mitigate CVE-2008-5798, update the CMS Poll system extension to version 0.1.1 or later.
3
What impact does CVE-2008-5798 have on TYPO3?
CVE-2008-5798 allows remote attackers to execute arbitrary SQL commands, compromising the integrity and security of the TYPO3 application.
4
Is CVE-2008-5798 present in versions of TYPO3 after 0.1.0?
No, CVE-2008-5798 is only present in the CMS Poll system extension version 0.1.0 and earlier.
5
Who is affected by CVE-2008-5798?
Any TYPO3 users running the CMS Poll system extension versions prior to 0.1.1 are at risk of CVE-2008-5798.