CVE-2008-5813
published 2009-01-02CVE-2008-5813: SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute…
PriorityP336high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.29%
67.0th percentile
SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | spip | < spip 2.0.6-1 (bullseye) | spip 2.0.6-1 (bullseye) |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | — | — |
| spip | spip | >= 0 < 2.0.6-1 | 2.0.6-1 |
| spip | spip | >= 0 < 2.0.6-1 | 2.0.6-1 |
| spip | spip | >= 0 < 2.0.6-1 | 2.0.6-1 |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wj8j-58jx-v347: SQL injection vulnerability in inc/rubriques
ghsa_unreviewed·2022-05-17
CVE-2008-5813 [HIGH] CWE-89 GHSA-wj8j-58jx-v347: SQL injection vulnerability in inc/rubriques
SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information.
OSV
CVE-2008-5813: SQL injection vulnerability in inc/rubriques
osv·2009-01-02·CVSS 7.5
CVE-2008-5813 [HIGH] CVE-2008-5813: SQL injection vulnerability in inc/rubriques
SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information.
Debian
CVE-2008-5813: spip - SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 ...
vendor_debian·2008·CVSS 7.5
CVE-2008-5813 [HIGH] CVE-2008-5813: spip - SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 ...
SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information.
Scope: local
bullseye: resolved (fixed in 2.0.6-1)
forky: resolved (fixed in 2.0.6-1)
sid: resolved (fixed in 2.0.6-1)
trixie: resolved (fixed in 2.0.6-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/33307http://www.securityfocus.com/bid/33021http://www.securityfocus.com/bid/33061http://www.spip-contrib.net/SPIP-1-8-3b-1-9-2g-2-2https://exchange.xforce.ibmcloud.com/vulnerabilities/47626https://exchange.xforce.ibmcloud.com/vulnerabilities/47695http://secunia.com/advisories/33307http://www.securityfocus.com/bid/33021http://www.securityfocus.com/bid/33061http://www.spip-contrib.net/SPIP-1-8-3b-1-9-2g-2-2https://exchange.xforce.ibmcloud.com/vulnerabilities/47626https://exchange.xforce.ibmcloud.com/vulnerabilities/47695
2009-01-02
Published