Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
AspcodecmsAspcode Cms

2 matches found

CVE
CVE•added 2010/02/25 8:0 p.m.•45 views

CVE-2010-0710

ASPCode CMS contains an SQL injection in default.asp affecting versions 1.5.8 and 2.0.0 Build 103 (and possibly others). The vulnerability occurs when the newsid parameter is supplied and the sec parameter equals 26, allowing remote attackers to execute arbitrary SQL commands. The available sourc...

7.5CVSS8.4AI score0.00366EPSS
CVE
CVE•added 2010/02/25 8:0 p.m.•40 views

CVE-2010-0711

The CVE-2010-0711 entry affects ASPCode CMS versions 1.5.8 and 2.0.0 Build 103 (and possibly others). The issue is a Cross-site Request Forgery (CSRF) in default.asp that enables remote attackers to hijack an administrator’s session for actions triggered via the ma2 parameter, specifically (1) de...

6.8CVSS7.5AI score0.00282EPSS