Vulnerabilities

TI-2008-06579 CVE-2008-6891 · GHSA-j9fw-3c66-cv33

Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id parameter to (a) new_message.asp and (b) messages.asp, and the (2…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01472 Published 2009-08-03 No fix listed CWE-79

TI-2008-06578 CVE-2008-6890 · GHSA-fcxq-f5j3-gxr9

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers…

LOW 35

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the message_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2009-08-03 No fix listed CWE-89

TI-2008-06190 CVE-2008-6500 · GHSA-2w7r-9m4h-c58p

Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows…

LOW 23

Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2009-03-20 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote…

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers…

Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows…