CVE-2008-6992
GreenSQL Firewall - SQL Injection Protection Bypass via WHERE Clause Expression
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6992. PoCs published by Johannes Dahse.
AI-analyzed exploit summary The provided text describes a security-bypass vulnerability in GreenSQL Firewall, where a specific SQL expression (x=y=z) can bypass security restrictions, aiding in SQL injection attacks. It references a security advisory but lacks functional exploit code.
Description
GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL.
Exploits (1)
The provided text describes a security-bypass vulnerability in GreenSQL Firewall, where a specific SQL expression (x=y=z) can bypass security restrictions, aiding in SQL injection attacks. It references a security advisory but lacks functional exploit code.