Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2012-4015

Cross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft Mylittletools
Products
Sql Server Mylittleadmin
CVE-2021-39392

The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Mylittletools
Products
Mylittlebackup
CVE-2020-13166

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.

CVSS 3.1 · 9.8 Critical EPSS 77.6% KEV · Not listed
Vendors
Mylittletools
Products
Mylittleadmin