Skip to content

CVE-2008-5924 SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is u...

HighCVSS 7.5 EPSS 1.0%
Published
Updated
Exploit status
No public exploit known

Description

SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

ProductAffected versionsFixed in
asp-dev xm events diary All versions No fix listed

References

  • 33152 third-party-advisory vendor-advisory
  • 33499 vdb-entry