Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
Link | Resource |
---|---|
http://secunia.com/advisories/30593 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/47032 |
Configurations
Information
Published : 2008-11-28 11:00
Updated : 2017-08-07 18:33
NVD link : CVE-2008-5274
Mitre link : CVE-2008-5274
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
toddwoolums
- todd_woolums_asp_news_management