[email protected]CVE-2008-6689

HistoryApr 10, 2009 - 10:00 p.m.

CVE-2008-6689

2009-04-1022:00:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2008-6689

sql injection

jobcontrol

typo3

security vulnerability

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

49.6%

JSON

SQL injection vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

CPENameOperatorVersion
kevin_renskers:dmmjobcontrolkevin renskers dmmjobcontrolle1.15.0
kevin_renskers:dmmjobcontrolkevin renskers dmmjobcontroleq1.0.0
kevin_renskers:dmmjobcontrolkevin renskers dmmjobcontroleq1.0.1
kevin_renskers:dmmjobcontrolkevin renskers dmmjobcontroleq1.1
kevin_renskers:dmmjobcontrolkevin renskers dmmjobcontroleq1.1.1
kevin_renskers:dmmjobcontrolkevin renskers dmmjobcontroleq1.2
kevin_renskers:dmmjobcontrolkevin renskers dmmjobcontroleq1.3
kevin_renskers:dmmjobcontrolkevin renskers dmmjobcontroleq1.4
kevin_renskers:dmmjobcontrolkevin renskers dmmjobcontroleq1.5
kevin_renskers:dmmjobcontrolkevin renskers dmmjobcontroleq1.6

CPE	Name	Operator	Version
kevin_renskers:dmmjobcontrol	kevin renskers dmmjobcontrol	le	1.15.0
kevin_renskers:dmmjobcontrol	kevin renskers dmmjobcontrol	eq	1.0.0
kevin_renskers:dmmjobcontrol	kevin renskers dmmjobcontrol	eq	1.0.1
kevin_renskers:dmmjobcontrol	kevin renskers dmmjobcontrol	eq	1.1
kevin_renskers:dmmjobcontrol	kevin renskers dmmjobcontrol	eq	1.1.1
kevin_renskers:dmmjobcontrol	kevin renskers dmmjobcontrol	eq	1.2
kevin_renskers:dmmjobcontrol	kevin renskers dmmjobcontrol	eq	1.3
kevin_renskers:dmmjobcontrol	kevin renskers dmmjobcontrol	eq	1.4
kevin_renskers:dmmjobcontrol	kevin renskers dmmjobcontrol	eq	1.5
kevin_renskers:dmmjobcontrol	kevin renskers dmmjobcontrol	eq	1.6

Rows per page:

1-10 of 311

References

osvdb.org/46386

typo3.org/teams/security/security-bulletins/typo3-20080619-1/

exchange.xforce.ibmcloud.com/vulnerabilities/43204

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

49.6%

JSON

Related for CVE-2008-6689

cvelist1 prion1