Read the docs

ASP-CMS Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ASP-CMS Project records in CISA KEV

No ASP-CMS Project vulnerabilities are listed in CISA KEV.

Records

1 record

Priority HIGH 77

ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00736 Published 2026-08-13 No fix listed CWE-89
Open these records in search →