CVE-2017-5965: Undefined Security Weakness

The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload...

PT-2017-16793

Name of the Vulnerable Software and Affected Versions Sitecore CRM version 8.1 Rev 151207 Description The issue allows remote authenticated administrators to execute arbitrary ASP code. This can be achieved by creating a ZIP archive with a .asp file that has a .. in its pathname. The archive is...

CVE-2005-2624: Undefined Security Weakness

Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaintargument parameter to 1 calculator.asp or 2 cpaintfile.asp, which is directly fed into an eval statement...