CVE-2008-5813
02.01.2009, 18:11
SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information.
| Vendor | Product | Version |
|---|---|---|
| spip | spip | 1.8 |
| spip | spip | 1.8.1 |
| spip | spip | 1.8.2 |
| spip | spip | 1.8.2b:b |
| spip | spip | 1.8.3 |
| spip | spip | 1.8b1:b1 |
| spip | spip | 1.8b2:b2 |
| spip | spip | 1.8b3:b3 |
| spip | spip | 1.8b4:b4 |
| spip | spip | 1.8b5:b5 |
| spip | spip | 1.8b6:b6 |
| spip | spip | 1.9.0 |
| spip | spip | 1.9.1:rev7385 |
| spip | spip | 1.9.1:rev7502 |
| spip | spip | 1.9.2 |
| spip | spip | 1.9.2f:f |
| spip | spip | 2.0.0 |
| spip | spip | 2.0.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References