CVE-2008-5268

The vulnerability CVE-2008-5268 is an SQL injection in ASPPortal’s content/forums/reply.asp, exploitable via the Topic_Id parameter. It allows remote attackers to execute arbitrary SQL commands. Public exploits exist (e.g., Exploit-DB entry 5775). The NVD entry cites a base score of 7.5 (HIGH) wi...