CVE-2009-0968: SQL Injection
Published Mar 19, 2009
·Updated
SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information.
Affected Software
4 affected components
Fahlstad Fmoblog Plugin=2.1
WordPress WordPress
All of the following
Fahlstad Fmoblog Plugin=2.1
WordPress WordPress
Event History
Mar 19, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
10:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·10:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0968?
The severity of CVE-2009-0968 is rated as high with a CVSS score of 7.5.
2
How do I fix CVE-2009-0968?
To fix CVE-2009-0968, update the fMoblog plugin to the latest version that addresses this SQL injection vulnerability.
3
What type of vulnerability is CVE-2009-0968?
CVE-2009-0968 is classified as a SQL injection vulnerability.
4
Can CVE-2009-0968 be exploited remotely?
Yes, CVE-2009-0968 can be exploited remotely by attackers through the id parameter in index.php.
5
What software is affected by CVE-2009-0968?
CVE-2009-0968 affects the fMoblog plugin version 2.1 for WordPress.