Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2008-5605
Disclosure Date: December 16, 2008 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter to classifieds.asp and the (2) ID parameter to Events.asp.
0
Attacker Value
Unknown
CVE-2008-5562
Disclosure Date: December 15, 2008 (last updated October 04, 2023)
ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb.
0
