CVE-2008-6968: SQL Injection
Published Aug 13, 2009
·Updated
Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.
Affected Software
1 affected component
Pligg Pligg CMS=9.9.5
Event History
Aug 13, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-6968?
CVE-2008-6968 has a high severity due to its potential to allow arbitrary SQL command execution.
2
How do I fix CVE-2008-6968?
To fix CVE-2008-6968, upgrade Pligg CMS to a version that is not affected by these SQL injection vulnerabilities.
3
What are the affected components in CVE-2008-6968?
CVE-2008-6968 affects the submit.php file in Pligg CMS version 9.9.5.
4
Can CVE-2008-6968 lead to data breaches?
Yes, CVE-2008-6968 can lead to data breaches by allowing attackers to manipulate and access sensitive data in the database.
5
Is CVE-2008-6968 specific to any user input parameters?
CVE-2008-6968 is specifically vulnerable to SQL injection through the 'category' and 'id' parameters.