Asp-dev - vulnerabilities (CVEs)
9 CVEs in 6 products, 0 in the last 30 days, newest from 2012-07-25.
Products
- Xm Events Diary - 3 CVEs
- Xm Forum - 2 CVEs
- Asp Resources Forum - 1 CVEs
- Internal E-mail System - 1 CVEs
- Xm Diary - 1 CVEs
- Xm Forums - 1 CVEs
Newest CVEs of Asp-dev
- CVE-2012-4061 - CVSS 7.5 (high), 2012-07-25: Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to diary_view.asp…
- CVE-2012-4060 - CVSS 7.5 (high), 2012-07-25: Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1)…
- CVE-2008-5925 - CVSS 5 (medium), 2009-01-21: ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the…
- CVE-2008-5926 - CVSS 7.5 (high), 2009-01-21: Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the (1)…
- CVE-2008-5924 - CVSS 7.5 (high), 2009-01-21: SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter.…
- CVE-2008-5923 - CVSS 7.5 (high), 2009-01-21: SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter.
- CVE-2005-4256 - CVSS 4.3 (medium), 2005-12-15: Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the…
- CVE-2005-4165 - CVSS 7.5 (high), 2005-12-11: Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the (1) forum_id parameter…
- CVE-2005-1008 - CVSS 4.3 (medium), 2005-05-02: Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a…
