RSS   Vulnerabilities for 'Asp autodealer'   RSS

2008-12-16
 
CVE-2008-5608

CWE-264
 

 
ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb.

 
 
CVE-2008-5595

CWE-89
 

 
SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter.

 

 >>> Vendor: Aspapps 4 Products
Aspportal
Asp autodealer
Aspticker
Template creature


Copyright 2017, cxsecurity.com

 

Back to Top