CVE-2009-4582: SQL Injection
Published Jan 6, 2010
·Updated
SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Software
1 affected component
Xoops Xoops Dictionary=2.0.18
Event History
Jan 6, 2010
CVE Published
via MITRE·09:33 PM
Data Sourced
via MITRE·09:33 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4582?
CVE-2009-4582 has a medium severity level due to the potential for remote SQL injection attacks.
2
How do I fix CVE-2009-4582?
To fix CVE-2009-4582, update your XOOPS Dictionary module to a version that is not vulnerable, ideally beyond 2.0.18.
3
What kind of attacks can CVE-2009-4582 allow?
CVE-2009-4582 can allow attackers to execute arbitrary SQL commands, potentially compromising the database.
4
Which software is affected by CVE-2009-4582?
CVE-2009-4582 affects the XOOPS 2.0.18 software, specifically the Dictionary module.
5
How can I detect exploitation of CVE-2009-4582 in my system?
Detection of CVE-2009-4582 exploitation can be done by monitoring logs for unusual database queries originating from unauthorized sources.