Asp-dev

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Asp-dev records in CISA KEV

No Asp-dev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xm Events Diary 3 records LOW Xm Forum 2 records LOW Asp Resources Forum 1 record LOW Internal E-mail System 1 record LOW Xm Diary 1 record LOW Xm Forums 1 record LOW

Records

3 records in Xm Events Diary · all components

TI-2008-05620 CVE-2008-5924 · GHSA-qvhg-92vh-gw68

SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote…

LOW 35

SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01001 Published 2009-01-21 No fix listed CWE-89

TI-2008-05619 CVE-2008-5923 · GHSA-6cm6-g93v-8j3m

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote…

LOW 35

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-01-21 No fix listed CWE-89

TI-2008-05621 CVE-2008-5925 · GHSA-fhcg-89c3-g9hx

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient…

LOW 25

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0117 Published 2009-01-21 No fix listed CWE-264

Open these records in search →

Critical	0
High	6
Medium	3
Low	0
No CVSS	0