Vulnerabilities

Filters

Reset all

1 selected

34 records

Sort

Vendor: Aspindir Clear all filters

TI-2010-04579 CVE-2010-4856 · GHSA-jm86-phm2-857p

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to…

LOW 35

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00902 Published 2011-10-05 No fix listed CWE-89

TI-2010-04578 CVE-2010-4855 · GHSA-285h-qjvj-x665

SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00992 Published 2011-10-05 No fix listed CWE-89

TI-2010-03900 CVE-2010-4145 · GHSA-gxm9-p8gx-446c

Kisisel Radyo Script stores sensitive information under the web root with insufficient…

LOW 28

Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02459 Published 2010-11-01 No fix listed CWE-264

TI-2010-03899 CVE-2010-4144 · GHSA-wmqv-c3qg-w3wr

SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers…

LOW 35

SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2010-11-01 No fix listed CWE-89

TI-2010-01665 CVE-2010-1736 · GHSA-v7m3-8qcv-rghh

KrM Haber 1.0 stores sensitive information under the web root with insufficient access…

LOW 26

KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for d_atabase/Krmdb.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01325 Published 2010-05-06 No fix listed CWE-264

TI-2009-04576 CVE-2009-4820 · GHSA-mggp-8wp8-3vq4

Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access…

LOW 28

Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for veribaze/angelo.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02456 Published 2010-04-27 No fix listed CWE-264

TI-2010-01075 CVE-2010-1116 · GHSA-8hqj-jh4x-x5cg

LookMer Music Portal stores sensitive information under the web root with insufficient…

LOW 26

LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for dbmdb/LookMerSarkiMDB.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01325 Published 2010-03-25 No fix listed CWE-264

TI-2010-01023 CVE-2010-1064 · GHSA-g2xm-x2v9-45p6

Erolife AjxGaleri VT stores sensitive information under the web root with insufficient…

LOW 28

Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/ajxgaleri.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02459 Published 2010-03-23 No fix listed CWE-264

TI-2009-04341 CVE-2009-4585 · GHSA-8qq6-8p6v-rxv4

UranyumSoft Listing Service stores sensitive information under the web root with…

LOW 28

UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02588 Published 2010-01-06 No fix listed CWE-264

TI-2008-06330 CVE-2008-6641 · GHSA-82r2-682c-f243

Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated…

LOW 30

Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to (1) kanal.asp, (2) google.asp, and (3) hakk.asp in yonet/; a…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00852 Published 2009-04-07 No fix listed CWE-89

TI-2008-06329 CVE-2008-6640 · GHSA-372q-v756-hv28

Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) uyeadmin.asp and (2) profil.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00969 Published 2009-04-07 No fix listed CWE-89

TI-2009-00427 CVE-2009-0447 · GHSA-v4j9-96xr-hm3r

Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the user parameter (aka UserName field) or (2) the pass parameter (aka Pass fie…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2009-02-05 No fix listed CWE-89

TI-2008-05415 CVE-2008-5707 · GHSA-684r-hjf4-qjrh

SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote…

LOW 35

SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00907 Published 2008-12-23 No fix listed CWE-89

TI-2008-04810 CVE-2008-5057 · GHSA-q5p4-rq7f-j55c

SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote…

LOW 35

SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the film parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01002 Published 2008-11-13 No fix listed CWE-89

TI-2008-04359 CVE-2008-4574 · GHSA-m8j7-4h7x-xp4p

SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers…

LOW 35

SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL commands via the linkid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-10-15 No fix listed CWE-89

TI-2008-04358 CVE-2008-4573 · GHSA-pr29-548q-87fq

SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote…

LOW 35

SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01024 Published 2008-10-15 No fix listed CWE-89

TI-2008-03727 CVE-2008-3888 · GHSA-7v43-h52m-h23c

SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote…

LOW 35

SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a member_details action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00893 Published 2008-09-02 No fix listed CWE-89

TI-2008-03347 CVE-2008-3495 · GHSA-jjv9-765p-62g3

SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to…

LOW 35

SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands via the kid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2008-08-06 No fix listed CWE-89

TI-2008-02756 CVE-2008-2882 · GHSA-3w4g-jj6x-f73c

upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative…

LOW 38

upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified other impact via a direct request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0258 Published 2008-06-26 No fix listed CWE-264

TI-2008-02747 CVE-2008-2873 · GHSA-2cj5-9fm4-hqv6

sHibby sHop 2.2 and earlier stores sensitive information under the web root with…

LOW 28

sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request to Db/urun.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02587 Published 2008-06-26 No fix listed CWE-264

TI-2008-02746 CVE-2008-2872 · GHSA-7g3f-h9r7-66xv

SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote…

LOW 35

SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sayfa parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2008-06-26 No fix listed CWE-89

TI-2008-02346 CVE-2008-2448 · GHSA-3hh5-h59p-5j29

Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to…

LOW 37

Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) admin/duzenle.asp and (b) admin_oku.asp; the (2) kid parameter to (c) kate…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02266 Published 2008-05-27 No fix listed CWE-89

TI-2008-02238 CVE-2008-2334 · GHSA-6qxm-3p9r-6fq6

Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) forumid parameter to (a) admin/philboard_admin-forumedit.asp, (b) admin/philboard_admin-…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0098 Published 2008-05-19 No fix listed CWE-89

TI-2008-01968 CVE-2008-2048 · GHSA-m25f-qfgv-6wmx

Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0…

LOW 23

Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject arbitrary web script or HTML via the sayfa parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01571 Published 2008-05-01 No fix listed CWE-79

TI-2008-01967 CVE-2008-2047 · GHSA-hxj3-mhvw-hm88

Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) hpz/profil.asp and (2) hpz/prodetail.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00997 Published 2008-05-01 No fix listed CWE-89