48 matches found
CVE-2005-1786: Undefined Security Weakness
SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter...
CVE-2005-1685
Episodex Guestbook is affected by an authentication bypass and unauthorized editing via admin.asp. Multiple sources (NVD/NVD-derived, OpenVAS NASL, Nessus plugin) describe an input-validation flaw in default.asp that enables remote, unauthenticated attackers to access admin functions and inject H...
CVE-2005-1685
episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp...
CVE-2005-1685: Direct Request
episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp...
CVE-2005-1685
episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp...
PT-2005-2662 · Episodex · Episodex Guestbook
Name of the Vulnerable Software and Affected Versions: episodex guestbook affected versions not specified Description: The issue allows remote attackers to bypass authentication and edit scripts via a direct request to "admin.asp". This enables unauthorized access and modification of scripts,...
CVE-2004-1130: Undefined Security Weakness
Cross-site scripting XSS vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as 1 username, 2 name, or 3 comments...
CVE-2002-0308: Undefined Security Weakness
admin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments...