CVE-2008-6049 — Rejected reason: SQL injection vulnerability in index.php in TinyMCE 2.0.1 allows remote attackers to execute arbitrary SQL commands via the menuID parameter

Rejected reason: SQL injection vulnerability in index.php in TinyMCE 2.0.1 allows remote attackers to execute arbitrary SQL commands via the menuID parameter

Published Feb 4, 2009

No CVSS score

EPSS 0.11%

Description

Rejected reason: SQL injection vulnerability in index.php in TinyMCE 2.0.1 allows remote attackers to execute arbitrary SQL commands via the menuID parameter. NOTE: CVE and multiple reliable third parties dispute this issue, since TinyMCE does not contain index.php or any PHP code. This may be an issue in a product that has integrated TinyMCE

Affected products

Remediation

No remediation recorded yet.

Metrics

0.11% 0.00112

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Dec 12, 2024.

EPSS probability 0.00112

Score over time

Feb–Dec 2024

EPSS v3

Percentile over time

EPSS v3

Table of values (2 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Dec 12, 2024	0.11% (0.00112)	46.27th	v3 (v2023.03.01)
Feb 8, 2024	0.11% (0.00112)	43.31th	v3 (v2023.03.01)

Weaknesses (0)

No CWE recorded.

References (0)

No references for this CVE.

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status n/a

Assigner n/a

Published Feb 4, 2009

Updated n/a

Reserved n/a

Link CVE-2008-6049

CISA Vulnrichment

Updated n/a

NVD

Status Rejected

Modified Nov 7, 2023

Link CVE-2008-6049

Red Hat

Severity n/a

Public date n/a

Links CVE-2008-6049