CVEvulnerability
CVE-2008-3223
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-07-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."
Affected configurations
• drupal drupal (>= 6.0 < 6.3)
• fedoraproject fedora 8
• fedoraproject fedora 9
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://drupal.org/node/280571 Patch, Vendor Advisory
- http://secunia.com/advisories/31079 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/07/10/3 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/30168 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=454849 Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43705 Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html Third Party Advisory
- http://drupal.org/node/280571 Patch, Vendor Advisory
- http://secunia.com/advisories/31079 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/07/10/3 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/30168 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=454849 Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43705 Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html Third Party Advisory