Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
asp-dev vulnerabilities and exploits
(subscribe to this query)
755
VMScore
CVE-2012-4060
Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote malicious users to execute arbitrary SQL commands via the id parameter to (1) profile.asp, (2) forum.asp, or (3) topic.asp.
Asp-dev Xm Forums -
1 EDB exploit
668
VMScore
CVE-2012-4061
Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote malicious users to execute arbitrary SQL commands via the (1) id parameter to diary_view.asp or (2) view_date parameter to default.asp.
Asp-dev Xm Diary
668
VMScore
CVE-2005-4165
Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote malicious users to execute arbitrary SQL commands via the (1) forum_id parameter to forum.asp, (2) unspecified parameters to register.asp, and (3) the "Search For" field in search.asp.
Asp-dev Asp Resources Forum
435
VMScore
CVE-2005-4256
Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote malicious users to inject arbitrary web script or HTML via the forum_title parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In additi...
Asp-dev Xm Forum Rc3
1 EDB exploit
668
VMScore
CVE-2008-5924
SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote malicious users to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Asp-dev Xm Events Diary
445
VMScore
CVE-2008-5925
ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download the database file via a direct request for diary.mdb.
Asp-dev Xm Events Diary
435
VMScore
CVE-2005-1008
Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote malicious users to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag.
Asp-dev Xm Forum Rc3
1 EDB exploit
755
VMScore
CVE-2008-5923
SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote malicious users to execute arbitrary SQL commands the cat parameter.
Asp-dev Xm Events Diary
1 EDB exploit
755
VMScore
CVE-2008-5926
Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote malicious users to execute arbitrary SQL commands via the (1) login parameter (aka user field) or the (2) password parameter (aka pass field). NOTE: some of these details are obtain...
Asp-dev Internal E-mail System
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654
CVE-2024-2757
authentication bypass
CVE-2024-3194
CVE-2024-33640
CVE-2024-21111
dos
insecure direct object reference
CVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started