NetSight
IP …
high7.5Public exploit code

CVE-2008-6992

GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause co…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL.

Affected products

VendorProductAffected versions
GreensqlGreensql Firewall
through 0.8.3
Versions 0.3.4, 0.3.5, 0.8.2

Weakness classification

CWE-89

References