Toddwoolums

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Toddwoolums records in CISA KEV

No Toddwoolums vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Todd Woolums Asp News Management 2 records LOW Asp Download 1 record LOW

Records

2 records in Todd Woolums Asp News Management · all components

TI-2008-05018 CVE-2008-5273 · GHSA-4x38-ppr7-27r8

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2…

LOW 35

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2008-11-28 No fix listed CWE-89

TI-2008-05019 CVE-2008-5274 · GHSA-x9f2-w4p7-wqfv

Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a…

LOW 27

Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02142 Published 2008-11-28 No fix listed CWE-264

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0