← Database

CVE-2008-6992

HIGH CVSS: 7.5 Published: 2009-08-19 Modified: 2026-06-16

Description

GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL.

Affected Platforms

Greensql Greensql Firewall

Weakness Type

CWE-89

References