CVE-2004-1648

CVE-2004-1648 is a cross-site scripting (XSS) vulnerability in Password Protect affecting multiple ASP pages (index.asp, ChangePassword.asp, users_list.asp, users_add.asp) via the ShowMsg parameter. The issue is documented across CVE entries (NVD, CVE List) with a MEDIUM severity (CVSS v2 base sc...

CVE-2004-1648: Undefined Security Weakness

Cross-site scripting XSS vulnerability in 1 index.asp, 2 ChangePassword.asp, 3 userslist.asp, 4 and usersadd.asp in Password Protect allows remote attackers to inject arbitrary web script or HTML via the ShowMsg parameter...

CVE-2004-1647: Undefined Security Weakness

SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass authentication via 1 admin or Pass parameter to indexnext.asp, 2 LoginId, OPass, or NPass to CPassChangePassword.asp, 3 usersedit.asp, or 4 usersadd.asp...