Unrated severityNVD Advisory· Published Feb 24, 2009· Updated Apr 23, 2026

CVE-2008-6257

Description

SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idpage parameter in the pages module.

Affected products

Openasp/Openasp
cpe:2.3:a:openasp:openasp:3.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/32322nvdExploit
secunia.com/advisories/32750nvdVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/46648nvd
www.exploit-db.com/exploits/7137nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000