CVE-2008-6992 GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", w...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| greensql firewall | <= 0.8.3 | No fix listed |
| greensql firewall | = 0.3.4 | No fix listed |
| greensql firewall | = 0.3.5 | No fix listed |
| greensql firewall | = 0.8.2 | No fix listed |
References
- bugs.mysql.com exploit
- 48910 exploit vdb-entry
- sla.ckers.org
- www.greensql.net patch
- www.greensql.net patch
- www.greensql.net vendor-advisory