CVE-2008-6049

Rejected reason: SQL injection vulnerability in index.php in TinyMCE 2.0.1 allows remote attackers to execute arbitrary SQL commands via the menuID parameter. NOTE: CVE and multiple reliable third parties dispute this issue, since TinyMCE does not contain index.php or any PHP code. This may be an issue in a product that has integrated TinyMCE

Published

Feb 4, 2009

Last Modified

Nov 7, 2023

Status

Rejected

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-6043Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) …
• CVE-2008-6044Cross-site scripting (XSS) vulnerability in advanced_search_…
• CVE-2008-6045Session fixation vulnerability in shopping_cart.php in xt:Co…
• CVE-2008-6046SQL injection vulnerability in ADbNewsSender before 1.5.2 al…
• CVE-2008-6047Cross-site scripting (XSS) vulnerability in ADbNewsSender be…
• CVE-2008-6048Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2008-6050SQL injection vulnerability in the Tech Articles (com_tech_a…
• CVE-2008-6051MetaCart Free stores metacart.mdb under the web root with in…
• CVE-2008-6052PreProjects Pre E-Learning Portal stores db_elearning.mdb un…
• CVE-2008-6053PreProjects Pre Resume Submitter stores onlineresume.mdb und…
• CVE-2008-6054PreProjects Pre Courier and Cargo Business stores dbcourior.…
• CVE-2008-6055PreProjects Pre Classified Listings stores pclasp.mdb under …