[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flMR8CLu16d5pNm4HsUX602wQrcwIpIUCS5PutxZ02nU":3,"g5a-risk:CVE-2008-2034":111},{"success":4,"data":5,"meta":109},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":64,"weaknesses":65,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":107,"notableEvents":108},"CVE-2008-2034","What is CVE-2008-2034?","SQL injection vulnerability in wp-download_monitor\u002Fdownload.php in the Download Monitor 2.0.6 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.","SQL injection vulnerability in wp-download_monitor\u002Fdownload.php in the Download Monitor 2.0.6 plugin for WordPress allows remote attackers to execute arbitra...","2008-04-30T16:17:00","2026-06-16T22:52:58.453",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.01889,[34,34,34,34,34,34,34],"High",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"wordpress","download_monitor_plugin","2.0.6","cpe:2.3:a:wordpress:download_monitor_plugin:2.0.6:*:*:*:*:*:*:*",1,[45,50,54,58,60,62],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F29876","Secunia",[49],"Vendor Advisory",{"url":51,"source":52,"tags":53},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F28975","Securityfocus",[],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F42094","Ibmcloud",[],{"url":46,"source":47,"tags":59},[49],{"url":51,"source":52,"tags":61},[],{"url":55,"source":56,"tags":63},[],6,[66],{"id":67,"name":68,"description":69,"extendedDescription":27,"status":70,"abstraction":71,"structure":72},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","Stable","Base","Simple",[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2008-2034? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-2034, a high severity cyber security vulnerability from 2008. SQL injection vulnerability in wp-download_monitor\u002Fdownload....","CVE-2008-2034, CVE-2008-2034 vulnerability, CVE-2008-2034 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, wordpress security, download_monitor_plugin vulnerability","\u002Fwhat-is\u002Fcve-2008-2034",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-2034","Cybersecurity","CVE-2008-2034, CVE-2008-2034 vulnerability, CVE-2008-2034 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":28,"Negate":28,"Nodes":101},[102],{"Operator":103,"Negate":32,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":106,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"96965D87-1DE8-4EDB-A9B4-25078DDBA9AD",[],[],{"lastModified":11,"cacheTime":110,"version":22},1792276589831,{"score":112,"band":113,"action":114,"scoredAt":115},46,"Medium","Plan remediation","2026-10-17T06:35:51.767056+00:00"]