Security Advisory

CVE-2008-6992

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-08-18 10:00:00
Last updated 2024-09-16 19:40:24
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL.