CVE-2008-6329

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password parameters, as reachable from Employee/emp_login.asp. NOTE: some of these details are obtained from third party information.

Link	Resource
http://www.securityfocus.com/bid/32366	Exploit
http://secunia.com/advisories/32785	Vendor Advisory
http://www.vupen.com/english/advisories/2008/3218
https://exchange.xforce.ibmcloud.com/vulnerabilities/46736
https://www.exploit-db.com/exploits/7164

Configuration 1

cpe:2.3:a:preproject:pre_asp_job_board:-:*:*:*:*:*:*:*

---

Published : 2009-02-27 04:30

Updated : 2017-09-29 01:33

---

NVD link : CVE-2008-6329

Mitre link : CVE-2008-6329

Pre Asp Job Board

Preproject

CWE-89