Vulnerabilities

TI-2008-05321 CVE-2008-5605 · GHSA-w89h-p889-cfjq

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute…

LOW 37

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter to classifieds.asp and the (2) ID parameter to Events.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02082 Published 2008-12-16 No fix listed CWE-89

TI-2008-05278 CVE-2008-5562 · GHSA-mq8m-q79f-mxpq

ASPPortal stores sensitive information under the web root with insufficient access…

LOW 31

ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05159 Published 2008-12-15 No fix listed CWE-264

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute…

ASPPortal stores sensitive information under the web root with insufficient access…