EUVD-2019-20201

ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...

CVE-2019-25765

CVE-2019-25765 affects ASP-CMS via a SQL injection in the commentList.asp endpoint. The vulnerability allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application’s keyword bloc...