Asp-Dev

9 CVEs across 6 Asp-Dev products. Browse Asp-Dev vulnerabilities, severities, and proof-of-concept exploits.

Asp-Dev products with known CVEs

ProductCVEs
Xm Events Diary3
Xm Forum2
Asp Resources Forum1
Internal E-Mail System1
Xm Diary1
Xm Forums1
Asp-Dev CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2012-40612012-07-25Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to diary_view.asp…
CVE-2012-40602012-07-25Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) profile.as…
CVE-2008-59262009-01-21Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the (1) logi…
CVE-2008-59252009-01-21ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the databas…
CVE-2008-59242009-01-21SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOT…
CVE-2008-59232009-01-21SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter.
CVE-2005-42562005-12-15Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forum_titl…
CVE-2005-41652005-12-11Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the (1) forum_id parameter t…
CVE-2005-10082005-05-02Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript…