Vulnerabilities

TI-2008-05621 CVE-2008-5925 · GHSA-fhcg-89c3-g9hx

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient…

LOW 25

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0117 Published 2009-01-21 No fix listed CWE-264

TI-2008-05620 CVE-2008-5924 · GHSA-qvhg-92vh-gw68

SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote…

LOW 35

SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01001 Published 2009-01-21 No fix listed CWE-89

TI-2008-05619 CVE-2008-5923 · GHSA-6cm6-g93v-8j3m

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote…

LOW 35

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-01-21 No fix listed CWE-89

Vulnerabilities

Filters

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient…

SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote…

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote…