Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown

CVE-2006-6350

Disclosure Date: December 07, 2006 (last updated October 04, 2023)
listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb.
0
0
Attacker Value
Unknown

CVE-2006-6210

Disclosure Date: December 01, 2006 (last updated October 04, 2023)
SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
0
0
Attacker Value
Unknown

CVE-2006-2989

Disclosure Date: June 13, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter.
0
0
Attacker Value
Unknown

CVE-2005-4658

Disclosure Date: December 31, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.
0
0
Attacker Value
Unknown

CVE-2005-4047

Disclosure Date: December 07, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the a parameter.
0
0
Attacker Value
Unknown

CVE-2005-3596

Disclosure Date: November 16, 2005 (last updated February 22, 2025)
SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.
0
0