Vulnerabilities

TI-2008-06563 CVE-2008-6875 · GHSA-2h57-3xqf-9v5f

SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers…

LOW 35

SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-5220.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0115 Published 2009-07-24 No fix listed CWE-89

TI-2009-01257 CVE-2009-1322 · GHSA-5g7v-g3rg-569j

ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient…

LOW 27

ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02286 Published 2009-04-17 No fix listed CWE-264

TI-2009-01256 CVE-2009-1321 · GHSA-gxc8-3g43-8358

Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01475 Published 2009-04-17 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers…

ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient…

Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows…