CVE-2008-5274

Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2008-11-28

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Todd Woolums Asp News Management (Toddwoolums)

References

• http://secunia.com/advisories/30593
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47032