CVE-2008-6145: SQL Injection
Multiple SQL injection vulnerabilities in the WEC Discussion Forum (wecdiscussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6145?
CVE-2008-6145 is classified as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2008-6145?
To fix CVE-2008-6145, upgrade the WEC Discussion Forum extension to version 1.7.1 or later.
What versions are affected by CVE-2008-6145?
CVE-2008-6145 affects WEC Discussion Forum extension versions 1.7.0 and earlier, including all previous versions such as 1.6.x.
What kind of attacks can occur due to CVE-2008-6145?
CVE-2008-6145 allows for SQL injection attacks, which can lead to unauthorized data access or manipulation.
Is TYPO3 itself vulnerable in CVE-2008-6145?
No, TYPO3 itself is not vulnerable; the vulnerability is specifically in the WEC Discussion Forum extension.