CVE-2008-5605

EPSS 2.1%

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter to classifieds.asp and the (2) ID parameter to Events.asp.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/7357unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://securityreason.com/securityalert/4763 https://exchange.xforce.ibmcloud.com/vulnerabilities/47127 https://exchange.xforce.ibmcloud.com/vulnerabilities/47268 https://www.exploit-db.com/exploits/7357 http://www.securityfocus.com/bid/32662