Filtered by vendor Asp-cms Subscriptions
Filtered by product Asp-cms Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-6353 1 Asp-cms 1 Asp-cms 2024-11-21 N/A
SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter.
CVE-2007-5260 1 Asp-cms 1 Asp-cms 2024-11-21 N/A
ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request for mdb-database/ASP-CMS_v100.mdb.