CVE-2008-2231

SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka...

7.5 High

SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to execute SQL commands and read table information via the id parameter.

Exploit likelihood

1.80%Down 2.0 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2008-2231
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-2231
Updated: 2026-11-02

EUVDEUVD-2008-2228 No score

Record: EUVD-2008-2228
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hpf8-8g34-6659 No score

SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka...

Record: GHSA-hpf8-8g34-6659
Weakness: CWE-89
Updated: 2026-11-02

Affected products

slashcode.com slash

Affected packages

Affected packages
Package	Affected	Fixed
`slash` Debian:4.0 From an advisory covering 2 CVEs	before 2.2.6-8etch1, plus listed versions 2.2.6-8	2.2.6-8etch1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-2231 is a high vulnerability (CVSS 7.5) in Slashcode.com Slash, published June 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. No source names a fixed version.

References

Show 9 moreShow less