2 matches found
CVE-2008-6152
SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: this was originally reported for Lawyer Portal, which does not have a deptdisplay.asp file...
8.3AI score0.00973EPSS
SaveExploits2References4
CVE-2008-6152: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: this was originally reported for Lawyer Portal, which does not have a deptdisplay.asp file...
7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
20