Back to Database
Status published
High
CVE-2008-6992
GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote...
Vulnerability Description
GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6992
Credits & Attribution
No credits recorded in the NVD database.
References
More from greensql
View All →CVE-2008-7229
GreenSQL Firewall (greensql-fw) before 0.9.2 allows remote attackers to bypass...
High
7.5
CVE-2008-6417
Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain...
Medium
5
CVE-2008-6416
Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL-Console before 0.3.5 allow...
Medium
4.3
CVE-2007-5059
Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers...
Medium
4.3
Affected Vendor
greensql
View all reports →Affected Software
greensql firewall
Vulnerable Versions:
0, 0.3.4, 0.3.5, 0.8.2
Timeline
Official Publish:
August 18th, 2009
Last Modified:
September 16th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.