CVE-2008-5813 - CVE House

Back to Database

Status published High CVE-2008-5813

SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b,...

7.5 CVSS

Vulnerability Description

SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5813

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from spip

View All →

Spip 4.1.10 Admin Account Spoofing via Malicious SVG Upload

RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users...

Spip Web Framework v3.1.13 and below was discovered to contain...

A PHP injection vulnerability in Spip before v3.2.8 allows attackers...

Multiple cross-site scripting (XSS) vulnerabilities in the component /spip.php of...

Affected Vendor

spip

View all reports →

Affected Software

spip

Vulnerable Versions:

1.8, 1.8.1, 1.8.2, 1.8.2b, 1.8.3, 1.8b1, 1.8b2, 1.8b3, 1.8b4, 1.8b5, 1.8b6, 1.9.0, 1.9.1, 1.9.2, 1.9.2f, 2.0.0, 2.0.1

Timeline

Official Publish: January 2nd, 2009

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.