CVEvulnerability
CVE-2008-5571
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-12-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter (aka user field) or the (2) psw parameter (aka passwd field). NOTE: some of these details are obtained from third party information.
Affected configurations
• dotnetindex professional download assistant 0.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/50548 osvdb.org
- http://secunia.com/advisories/33030 Vendor Advisory
- http://securityreason.com/securityalert/4749 securityreason.com
- http://www.securityfocus.com/bid/32706 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47170 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7390 www.exploit-db.com
- http://osvdb.org/50548 osvdb.org
- http://secunia.com/advisories/33030 Vendor Advisory
- http://securityreason.com/securityalert/4749 securityreason.com
- http://www.securityfocus.com/bid/32706 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47170 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7390 www.exploit-db.com