CVE-2008-2231

ALTO 7.5CVE-2008-2231 · Published 05/06/2008 · updated 16/06/2026

In breve

CVE-2008-2231 è una vulnerabilità ALTO (CVSS 7.5) che riguarda slash (slashcode.com).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 78.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
slash slashcode.com	`≤ r_2_5_0_94`	No fix yet

Description

SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to execute SQL commands and read table information via the id parameter.

References

bugs.debian.org/cgi-bin/bugreport.cgi
marc.info
marc.info
secunia.com/advisories/30551 · Vendor Advisory
secunia.com/advisories/31691
securityreason.com/securityalert/3923
slashcode.cvs.sourceforge.net/slashcode/slash/Slash/Utility/Environment/Environment.pm
debian.org/security/2008/dsa-1633
securityfocus.com/bid/29548
securitytracker.com/id
slashcode.com/article.pl
slashcode.com/article.pl
exchange.xforce.ibmcloud.com/vulnerabilities/42880

Altre vulnerabilità di slash

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free