PT-2008-6406 · Todd Woolums · Todd Woolums Asp News Management

Published 2008-11-28 · Updated 2017-08-08 · CVE-2008-5274

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Todd Woolums ASP News Management version 2.2

Description The issue allows remote attackers to obtain news items by making a direct request to specific API endpoints, including "rss.asp", "viewheadings.asp", or "viewnews.asp".

Recommendations For Todd Woolums ASP News Management version 2.2, consider restricting access to the "rss.asp", "viewheadings.asp", and "viewnews.asp" endpoints to minimize the risk of unauthorized news item access.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-5274

Affected Products

Todd Woolums Asp News Management

References · 4

• 🔥 https://exploit-db.com/exploits/5781 · Exploit
• http://secunia.com/advisories/30593 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5274 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47032 · Note