3 matches found
Sql injection
SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid parameter...
7.5CVSS9.1AI score0.00993EPSS
SaveExploits2References3
CVE-2009-2776
CVE-2009-2776 is a SQL injection vulnerability affecting Smart ASP Survey’s showresult.asp, exploitable via the catid parameter to execute arbitrary SQL commands remotely. Public records consistently describe the flaw as a SQL injection in showresult.asp, with no additional details on patched ver...
7.5CVSS8.7AI score0.00993EPSS
SaveExploits2References3Affected Software1
CVE-2009-2776: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid parameter...
7.5CVSS6.4AI score0.00993EPSS
SaveExploits2References2
20