← Database

CVE-2008-5273

HIGH CVSS: 7.5 Published: 2008-11-28 Modified: 2026-06-16

Description

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter.

Affected Platforms

Toddwoolums Todd Woolums Asp News Management

Weakness Type

CWE-89

References