Vulnerabilities

TI-2008-05288 CVE-2008-5572 · GHSA-q66q-c635-8w79

Professional Download Assistant 0.1 stores sensitive information under the web root with…

LOW 33

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/download…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07386 Published 2008-12-15 No fix listed CWE-264

TI-2008-05287 CVE-2008-5571 · GHSA-7645-v67f-hhv7

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1…

LOW 37

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter (aka user field) or the (2) psw parameter (aka p…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02373 Published 2008-12-15 No fix listed CWE-89

Vulnerabilities

Filters

Professional Download Assistant 0.1 stores sensitive information under the web root with…

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1…