Iisworks

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Iisworks records in CISA KEV

No Iisworks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aspknowledgebase 3 records LOW Listpics 2 records MEDIUM Asp Listpics 1 record LOW

Records

2 records in Listpics · all components

TI-2006-06099 CVE-2006-6350 · GHSA-rqgj-xgp5-32cq

listpics 5 stores sensitive data under the web root with insufficient access control…

MEDIUM 47

listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02431 Published 2006-12-07 No fix listed

TI-2006-02894 CVE-2006-2989 · GHSA-83fq-mv79-2mhj

Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier…

LOW 24

Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01822 Published 2006-06-13 No fix listed

Open these records in search →

Critical	1
High	2
Medium	3
Low	0
No CVSS	0