Aspapps

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Aspapps records in CISA KEV

No Aspapps vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Asp Autodealer 2 records LOW Aspportal 2 records LOW Template Creature 2 records LOW Aspticker 1 record LOW

Records

7 records

TI-2008-05321 CVE-2008-5605 · GHSA-w89h-p889-cfjq

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute…

LOW 37

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter to classifieds.asp and the (2) ID parameter to Events.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02082 Published 2008-12-16 No fix listed CWE-89

TI-2008-05646 CVE-2008-5950 · GHSA-h7ch-57gm-g4mg

SQL injection vulnerability in media/media_level.asp in ASP Template Creature allows…

LOW 35

SQL injection vulnerability in media/media_level.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands via the mcatid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-01-23 No fix listed CWE-89

TI-2008-05311 CVE-2008-5595 · GHSA-5q33-7858-783r

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to…

LOW 35

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2008-12-16 No fix listed CWE-89

TI-2008-05278 CVE-2008-5562 · GHSA-mq8m-q79f-mxpq

ASPPortal stores sensitive information under the web root with insufficient access…

LOW 31

ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05159 Published 2008-12-15 No fix listed CWE-264

TI-2008-05324 CVE-2008-5608 · GHSA-2vm9-v8wh-q7q8

ASP AutoDealer stores sensitive information under the web root with insufficient access…

LOW 28

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0285 Published 2008-12-16 No fix listed CWE-264

TI-2008-05319 CVE-2008-5603 · GHSA-7f92-cv7f-789v

ASPTicker 1.0 stores sensitive information under the web root with insufficient access…

LOW 28

ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for news.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02615 Published 2008-12-16 No fix listed CWE-264

TI-2008-05647 CVE-2008-5951 · GHSA-m7rh-7p2v-f6wf

ASP Template Creature stores sensitive information under the web root with insufficient…

LOW 27

ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02229 Published 2009-01-23 No fix listed CWE-264

Open these records in search →

Critical	0
High	3
Medium	4
Low	0
No CVSS	0