Vulnerabilities

TI-2008-06666 CVE-2008-6978 · GHSA-cv53-g7qg-37mj

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote…

LOW 37

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04295 Published 2009-08-18 No fix listed CWE-20

TI-2008-06665 CVE-2008-6977 · GHSA-6rqp-mj8j-r4r5

Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2…

LOW 24

Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01751 Published 2009-08-18 No fix listed CWE-79

TI-2009-01158 CVE-2009-1223 · GHSA-8whw-6c85-qg7r

aspWebCalendar Free Edition stores sensitive information under the web root with…

LOW 25

aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for cale…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01064 Published 2009-04-02 No fix listed CWE-264

TI-2008-02706 CVE-2008-2832 · GHSA-43xj-hvp7-hp7w

Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution…

MEDIUM 56

Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar 2008 allows remote attackers to upload and execute arbitrary code via the FILE1 parameter in an uploadfileprocess action, pro…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.11804 Published 2008-06-24 No fix listed CWE-94

TI-2004-01429 CVE-2004-1553 · GHSA-rfmv-7688-qrqx

SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary…