CVE-2008-6686: SQL Injection
Published Apr 10, 2009
·Updated
SQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Affected Software
2 affected components
Typo3 TYPO3
Jan Bednarik Cooluri<=1.0.11
Remediation
Event History
Apr 10, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
10:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6686?
CVE-2008-6686 has a high severity due to its SQL injection vulnerability allowing remote execution of arbitrary SQL commands.
2
How do I fix CVE-2008-6686?
To fix CVE-2008-6686, upgrade the CoolURI extension to version 1.0.12 or later.
3
Which software is affected by CVE-2008-6686?
CVE-2008-6686 affects CoolURI versions 1.0.11 and earlier for TYPO3.
4
Can CVE-2008-6686 be exploited remotely?
Yes, CVE-2008-6686 can be exploited remotely by attackers to execute arbitrary SQL commands.
5
Is there any mitigation for CVE-2008-6686?
The primary mitigation for CVE-2008-6686 is to update to a patched version of the CoolURI extension.