CVE-2008-5605

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-12-16 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter to classifieds.asp and the (2) ID parameter to Events.asp.

Affected products

Aspapps Aspportal: _nil_

References

http://securityreason.com/securityalert/4763
http://www.securityfocus.com/bid/32662
https://exchange.xforce.ibmcloud.com/vulnerabilities/47127
https://exchange.xforce.ibmcloud.com/vulnerabilities/47268
https://www.exploit-db.com/exploits/7357
http://securityreason.com/securityalert/4763
http://www.securityfocus.com/bid/32662
https://exchange.xforce.ibmcloud.com/vulnerabilities/47127
https://exchange.xforce.ibmcloud.com/vulnerabilities/47268
https://www.exploit-db.com/exploits/7357

Get alerted when CVE-2008-5605 or the next vulnerability affects your stack