CVE-2008-5274
Published Nov 28, 2008Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp. NOTE: the proven…
Vendor/product archive
2 CVEs tagged to toddwoolums / todd_woolums_asp_news_management — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.
Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp. NOTE: the proven…
SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter.