Aspapps

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Aspapps records in CISA KEV

No Aspapps vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Asp Autodealer 2 records LOW Aspportal 2 records LOW Template Creature 2 records LOW Aspticker 1 record LOW

Records

2 records in Asp Autodealer · all components

TI-2008-05311 CVE-2008-5595 · GHSA-5q33-7858-783r

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to…

LOW 35

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2008-12-16 No fix listed CWE-89

TI-2008-05324 CVE-2008-5608 · GHSA-2vm9-v8wh-q7q8

ASP AutoDealer stores sensitive information under the web root with insufficient access…

LOW 28

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0285 Published 2008-12-16 No fix listed CWE-264

Open these records in search →

Critical	0
High	3
Medium	4
Low	0
No CVSS	0