CVE-2008-5605

EUVD-2008-5580
Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter to classifieds.asp and the (2) ID parameter to Events.asp.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
Common Weakness Enumeration
References
http://securityreason.com/securityalert/4763
http://www.securityfocus.com/bid/32662
https://exchange.xforce.ibmcloud.com/vulnerabilities/47127
https://exchange.xforce.ibmcloud.com/vulnerabilities/47268
https://www.exploit-db.com/exploits/7357
http://securityreason.com/securityalert/4763
http://www.securityfocus.com/bid/32662
https://exchange.xforce.ibmcloud.com/vulnerabilities/47127
https://exchange.xforce.ibmcloud.com/vulnerabilities/47268
https://www.exploit-db.com/exploits/7357