AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2008-3223

HIGH · CVSS 7.5 EPSS 3.16%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-07-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2008-3223
Severity
HIGH
CVSS
7.5
EPSS
3.16%

Original Filing — NVD Description

SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."