CVE-2008-3359 - CVE House
Back to Database
Status published High CVE-2008-3359

SQL injection vulnerability in register.php in Steve Bourgeois and Chris...

Vulnerability Description

SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-3359

Credits & Attribution

No credits recorded in the NVD database.

References

More from owl

View All →
CVE-2013-4754
Multiple cross-site scripting (XSS) vulnerabilities in Owl Intranet Knowledgebase 1.10...
Low 3.5
CVE-2008-3100
Cross-site scripting (XSS) vulnerability in lib/owl.lib.php in Steve Bourgeois and...
Medium 4.3
CVE-2006-1149
PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet...
High 7.5
CVE-2005-0265
Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and...
High 7.5
CVE-2005-0264
Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7...
Medium 4.3

Affected Vendor

Affected Software

intranet knowledgebase
Vulnerable Versions:
0, 0.94

Timeline

Official Publish: July 29th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.