Sql injection

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter...

CVE-2008-5273

The CVE-2008-5273 entry describes an SQL injection vulnerability in viewnews.asp of Todd Woolums ASP News Management 2.2, exploitable via the newsID parameter to execute arbitrary SQL commands remotely. Connected records confirm affected software/version and the underlying cause (unsafely handled...

CVE-2008-5274: Undefined Security Weakness

Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to 1 rss.asp, 2 viewheadings.asp, or 3 viewnews.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-5273: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter...

Todd Woolums ASP News Management 2.2 SQL Injection Vulnerabiltiy

Exploit for unknown platform in category web applications ================================================================ Todd Woolums ASP News Management 2.2 SQL Injection Vulnerabiltiy ================================================================...