EUVD-2008-6227

Malware in sbrugna...

Sql injection

SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idpage parameter in the pages module...

CVE-2008-6257

SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idpage parameter in the pages module...

CVE-2008-6257

OpenASP 3.0 and earlier are affected by a SQL injection in default.asp (pages module) via the idpage parameter, allowing remote execution of arbitrary SQL commands. Root cause: unsafe SQL construction in the pages module. Affected: Openasp 3.0 and earlier. CVSS indicates high impact with partial ...

CVE-2008-6257

SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idpage parameter in the pages module...

openasp-sql.txt

/ OpenASP = 3.0 Blind SQL Injection Vulnerability ----------------------------------------------------- by athos - stakerathotmaildotit thanks XaDoS,anyway i've found another sql injection http://openasp.it ----------------------------------------------------- default.asp?modulo=pages&idpage=1 or...