← Database

CVE-2008-6890

HIGH CVSS: 7.5 Published: 2009-08-03 Modified: 2026-06-16

Description

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the message_id parameter.

Affected Platforms

Codetoad Asp Forum Script

Weakness Type

CWE-89

References