CVE-2008-6992

CVE-2008-6992 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.