CVE-2008-1354 SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP (VSO-XP) allows remote attackers to execute arbitrary SQL commands via the Issue_ID parameter.
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP (VSO-XP) allows remote attackers to execute arbitrary SQL commands via the Issue_ID parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| advanced data solutions virtual support office xp | = 2 | No fix listed |
References
- forum.aria-security.com
- 20080313 Office XP Remote SQL Injection mailing-list
- 29365 third-party-advisory vendor-advisory
- 28247 exploit vdb-entry
- vsoxp-myissuesview-sql-injection(41206) vdb-entry