CVE-2008-6462: SQL Injection
Published Mar 13, 2009
·Updated
SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
8 affected components
Kurt Gusbeth Myquizpoll<=0.1.3
Kurt Gusbeth Myquizpoll=0.1.1
Kurt Gusbeth Myquizpoll=0.1.2
Typo3 TYPO3
All of the following
Any of the following
Kurt Gusbeth Myquizpoll<=0.1.3
Kurt Gusbeth Myquizpoll=0.1.1
Kurt Gusbeth Myquizpoll=0.1.2
Typo3 TYPO3
Remediation
Event History
Mar 13, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
10:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·10:30 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6462?
CVE-2008-6462 is classified as a high severity vulnerability due to its potential for remote SQL command execution.
2
How do I fix CVE-2008-6462?
To fix CVE-2008-6462, upgrade the My quiz and poll extension to version 0.1.4 or later.
3
What software is affected by CVE-2008-6462?
CVE-2008-6462 affects versions of the My quiz and poll extension prior to 0.1.4.
4
Can CVE-2008-6462 be exploited without authentication?
Yes, CVE-2008-6462 can be exploited by remote attackers without authentication due to its SQL injection nature.
5
What type of vulnerability is CVE-2008-6462?
CVE-2008-6462 is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.