CVE-2008-6049

Published Feb 4, 2009 CVSS n/a EPSS n/a KEV · Not listed
Description
SQL injection vulnerability in index.php in TinyMCE 2.0.1 allows remote attackers to execute arbitrary SQL commands via the menuID parameter. NOTE: CVE and multiple reliable third parties dispute this issue, since TinyMCE does not contain index.php or any PHP code. This may be an issue in a product that has integrated TinyMCE

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
References

No reference.

History

No history.

Subscriptions

No data.

Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
mitre
Published
Updated
Oct 23, 2017, 4:57 PM
Reserved
Feb 4, 2009, 12:00 AM
Status
Rejected
Published
Feb 4, 2009, 3:30 PM
Modified
Nov 7, 2023, 2:03 AM