CVE-2008-5895

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2009
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-58967.5CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to CVE-2008-58977.5CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allows remote attackers CVE-2008-58987.5CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to dCVE-2008-58997.5CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to CVE-2008-59007.5CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to doCVE-2008-59017.5iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to dowCVE-2008-59027.5Buffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and earlier allows remote attackers to execute arCVE-2008-59037.5Array index error in the xrdp_bitmap_def_proc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrarCVE-2008-59047.5The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impacCVE-2008-59054.3The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrenCVE-2008-59066.8Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via CVE-2008-59075.0The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to se
CVE-2008-5895: High severity, CVSS 7.5 | Vulnix