CVE-2008-5946: SQL Injection
Published Jan 22, 2009
·Updated
SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.
Affected Software
1 affected component
PHP-Fusion php-fusion=4.01
Event History
Jan 22, 2009
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
via NVD·11:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5946?
CVE-2008-5946 is classified as a critical vulnerability due to its ability to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2008-5946?
To fix CVE-2008-5946, upgrade to a patched version of PHP-Fusion or implement input validation on the news_id parameter to prevent SQL injection.
3
Which versions of PHP-Fusion are affected by CVE-2008-5946?
CVE-2008-5946 affects PHP-Fusion version 4.01.
4
Can CVE-2008-5946 be exploited remotely?
Yes, CVE-2008-5946 can be exploited remotely, allowing attackers to access the vulnerable application from anywhere.
5
What parameters are vulnerable in CVE-2008-5946?
The vulnerability in CVE-2008-5946 specifically targets the news_id parameter in readmore.php.