CVE-2008-6166: SQL Injection
Published Feb 19, 2009
·Updated
SQL injection vulnerability in the KBase (comkbase) 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php.
Affected Software
4 affected components
Joomla joomla
Jmds Com Kbase=1.2
All of the following
Joomla joomla
Jmds Com Kbase=1.2
Event History
Feb 19, 2009
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
12:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·12:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6166?
CVE-2008-6166 is classified as a high severity vulnerability due to its ability to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2008-6166?
To fix CVE-2008-6166, update the KBase component to a version that has addressed this vulnerability or implement input validation to sanitize the 'id' parameter.
3
Which software is affected by CVE-2008-6166?
CVE-2008-6166 affects the KBase 1.2 component for Joomla!.
4
What type of vulnerability is CVE-2008-6166?
CVE-2008-6166 is an SQL injection vulnerability.
5
Can CVE-2008-6166 lead to data loss?
Yes, CVE-2008-6166 can lead to data loss as attackers can execute arbitrary SQL commands, potentially compromising the database.