PT-2008-6406 · Todd Woolums · Todd Woolums Asp News Management

Publicado 2008-11-28 · Atualizado 2017-08-08 · CVE-2008-5274

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Todd Woolums ASP News Management version 2.2

Description The issue allows remote attackers to obtain news items by making a direct request to specific API endpoints, including "rss.asp", "viewheadings.asp", or "viewnews.asp".

Recommendations For Todd Woolums ASP News Management version 2.2, consider restricting access to the "rss.asp", "viewheadings.asp", and "viewnews.asp" endpoints to minimize the risk of unauthorized news item access.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-5274

Produtos afetados

Todd Woolums Asp News Management

Referências · 4

• 🔥 https://exploit-db.com/exploits/5781 · Exploit
• http://secunia.com/advisories/30593 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-5274 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47032 · Nota