Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2012-4061
Disclosure Date: July 25, 2012 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to diary_view.asp or (2) view_date parameter to default.asp.
0
Attacker Value
Unknown
CVE-2008-5923
Disclosure Date: January 21, 2009 (last updated October 04, 2023)
SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter.
0
Attacker Value
Unknown
CVE-2008-5925
Disclosure Date: January 21, 2009 (last updated October 04, 2023)
ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb.
0
Attacker Value
Unknown
CVE-2008-5924
Disclosure Date: January 21, 2009 (last updated October 04, 2023)
SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
