Export limit exceeded: 425898 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2006-6210

SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Iisworks
Products
Asp Listpics
CVE-2006-6350

listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb.

CVSS 2.0 · 10.0 Critical EPSS 2.4% KEV · Not listed
Vendors
Iisworks
Products
Listpics
CVE-2005-3596

SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Iisworks
Products
Aspknowledgebase
CVE-2005-4047

Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the a parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Iisworks
Products
Aspknowledgebase
CVE-2005-4658

Multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.

CVSS 2.0 · 6.8 Medium EPSS 1.5% KEV · Not listed
Vendors
Iisworks
Products
Aspknowledgebase
CVE-2006-2989

Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Iisworks
Products
Listpics