RSS   Podatności dla 'Aspportal'   RSS

2008-12-16
 
CVE-2008-5605

CWE-89
 
 
Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter to classifieds.asp and the (2) ID parameter to Events.asp.

 
2008-12-15
 
CVE-2008-5562

CWE-264
 
 
ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb.

 

 >>> Vendor: Aspapps 4 Produkty
Aspportal
Aspticker
Asp autodealer
Template creature

Copyright 2024, cxsecurity.com

 

Back to Top