CVE-2008-6257 SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idpage parameter in the pages module.
HighCVSS 7.5
EPSS 0.97%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idpage parameter in the pages module.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openasp | = 3.0 | No fix listed |
References
- 32750 third-party-advisory vendor-advisory
- 32322 exploit vdb-entry
- openasp-idpage-sql-injection(46648) vdb-entry
- 7137 exploit