Lucene search
+L

48 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/31 12:00 a.m.•3 views

CVE-2005-1786: Undefined Security Weakness

SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter...

7.5CVSS6.4AI score0.01345EPSS
SaveExploits1References1
CVE
CVE
•added 2005/05/25 4:00 a.m.•70 views

CVE-2005-1685

Episodex Guestbook is affected by an authentication bypass and unauthorized editing via admin.asp. Multiple sources (NVD/NVD-derived, OpenVAS NASL, Nessus plugin) describe an input-validation flaw in default.asp that enables remote, unauthenticated attackers to access admin functions and inject H...

7.5CVSS6.9AI score0.01728EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2005/05/25 4:00 a.m.•31 views

CVE-2005-1685

episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp...

6.9AI score0.01728EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/25 12:00 a.m.•3 views

CVE-2005-1685: Direct Request

episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp...

7.5CVSS5.8AI score0.01728EPSS
SaveExploits0References2
NVD
NVD
•added 2005/05/20 4:00 a.m.•27 views

CVE-2005-1685

episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp...

7.5CVSS6.9AI score0.01728EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2005/05/20 12:00 a.m.•12 views

PT-2005-2662 · Episodex · Episodex Guestbook

Name of the Vulnerable Software and Affected Versions: episodex guestbook affected versions not specified Description: The issue allows remote attackers to bypass authentication and edit scripts via a direct request to "admin.asp". This enables unauthorized access and modification of scripts,...

7.5CVSS6.7AI score0.01728EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/12/05 12:00 a.m.•2 views

CVE-2004-1130: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as 1 username, 2 name, or 3 comments...

6.8CVSS6.3AI score0.01306EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/05/03 12:00 a.m.•2 views

CVE-2002-0308: Undefined Security Weakness

admin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments...

10CVSS5.9AI score0.02667EPSS
SaveExploits0References1
Rows per page
Query Builder