Vulnerabilities

TI-2005-01743 CVE-2005-1836 · GHSA-hqvf-c7r7-24c5

NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a…

LOW 26

NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard requests for .jsp files.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01786 Published 2005-06-02 No fix listed

TI-2005-01742 CVE-2005-1835 · GHSA-36wp-8fj8-g4xg

NEXTWEB (i)Site stores databases under the web document root with insufficient access…

LOW 27

NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01951 Published 2005-06-02 No fix listed CWE-552

TI-2005-01741 CVE-2005-1834 · GHSA-qj9g-6jwv-pw3c

SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to…

LOW 36

SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01399 Published 2005-06-02 No fix listed

Vulnerabilities

Filters

NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a…

NEXTWEB (i)Site stores databases under the web document root with insufficient access…

SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to…