Search vulnerabilities

Results 3

Export CSV
CVE-2004-1843

SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to (1) resend.asp or (2) news_view.asp.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
CVE-2004-1844

Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the err parameter to error.asp or (2) register.asp.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
CVE-2010-4896

Cross-site scripting (XSS) vulnerability in admin/index.asp in Member Management System 4.0 allows remote attackers to inject arbitrary web script or HTML via the REF_URL parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors