CVE-2008-6489: SQL Injection
Published Mar 19, 2009
·Updated
SQL injection vulnerability in MyAlbum component (commyalbum) 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the album parameter to index.php.
Affected Software
4 affected components
Joomla joomla
Huseyin Bora Abaci Com Myalbum=1.0
All of the following
Joomla joomla
Huseyin Bora Abaci Com Myalbum=1.0
Event History
Mar 19, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
10:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·10:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6489?
The severity of CVE-2008-6489 is classified as high with a score of 7.5.
2
How do I fix CVE-2008-6489?
To fix CVE-2008-6489, update the MyAlbum component to the latest version that addresses this SQL injection vulnerability.
3
What kind of attack does CVE-2008-6489 allow?
CVE-2008-6489 allows remote attackers to execute arbitrary SQL commands via the album parameter in index.php.
4
Which software is affected by CVE-2008-6489?
CVE-2008-6489 affects the MyAlbum component (com_myalbum) version 1.0 for Joomla!.
5
What is the impact of CVE-2008-6489 on the system?
CVE-2008-6489 can lead to unauthorized disclosure of data and modification of database contents due to SQL injection.