Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-6257. PoCs published by StAkeR.
AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in OpenASP <= 3.0 via the 'idpage' parameter. The PoC shows how to manipulate the query to extract database version information.
Description
SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idpage parameter in the pages module.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by StAkeR · textwebappsasp
https://www.exploit-db.com/exploits/7137
This exploit demonstrates a blind SQL injection vulnerability in OpenASP <= 3.0 via the 'idpage' parameter. The PoC shows how to manipulate the query to extract database version information.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
OpenASP <= 3.0
No auth needed
Prerequisites:
Access to the vulnerable OpenASP application
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46648
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/32322
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/7137
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/32750
Scores
EPSS
0.0097
EPSS Percentile
57.4%
Details
CWE
CWE-89
Status
published
Products (1)
openasp/openasp
3.0
Published
Feb 24, 2009
Tracked Since
Feb 18, 2026