Aspindir

34 CVEs across 24 Aspindir products. Browse Aspindir vulnerabilities, severities, and proof-of-concept exploits.

Aspindir products with known CVEs

ProductCVEs
Angelo-Emlak3
Shibby Shop3
Xweblog3
Husrevforum2
Kisisel Radyo Script2
Philboard2
Text File Search2
Aspee Ziyaretci Defteri1
Ayco Okul Portali1
Batmanportal1
Dersimiz Haber Ekleme Modulu1
Dizi Portali1
Erolife Ajxgaleri Vt1
Hazirsite1
Iltaweb Alisveris Sistemi1
Krm Haber1
Lookmer Muzik Portal1
Meto Forum1
Mini Nuke Freehost1
Munzursoft Web Portal W31
Mydesign Sayac1
Pcshey Portal1
Shader Tv1
Uranyumsoft Listing Service1
Aspindir CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2010-48562011-10-05SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter.
CVE-2010-48552011-10-05SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale_id parameter.
CVE-2010-41452010-11-02Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via…
CVE-2010-41442010-11-02SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter.
CVE-2010-17362010-05-06KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a dire…
CVE-2009-48202010-04-27Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a d…
CVE-2010-11162010-03-25LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via…
CVE-2010-10642010-03-23Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via…
CVE-2009-45852010-01-06UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a datab…
CVE-2008-66412009-04-07Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to…
CVE-2008-66402009-04-07Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) uyeadmin.asp and (2…
CVE-2009-04472009-02-10Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the user parameter…
CVE-2008-57072008-12-24SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter.
CVE-2008-50572008-11-13SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the film parameter. NOTE: t…
CVE-2008-45742008-10-15SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL commands via the linkid parameter.
CVE-2008-45732008-10-15SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat parameter.
CVE-2008-38882008-09-02SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a membe…
CVE-2008-34952008-08-06SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands via the kid parameter.
CVE-2008-28822008-06-26upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified o…
CVE-2008-28732008-06-26sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a datab…
CVE-2008-28722008-06-26SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sayfa parameter.
CVE-2008-24482008-05-27Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) admin/duzenle…
CVE-2008-23342008-05-19Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) forumid parameter to (a) ad…
CVE-2008-20482008-05-01Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject arbitrary web script or HTML via the sa…
CVE-2008-20472008-05-01Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) hpz/profil.asp…
CVE-2008-19392008-04-25Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) topic parameters…
CVE-2007-44342007-08-20Cross-site scripting (XSS) vulnerability in textfilesearch.asp in the Text File Search ASP (Classic) edition allows remote attackers to inject arbitrary web sc…
CVE-2007-44332007-08-20Cross-site scripting (XSS) vulnerability in textfilesearch.aspx in the Text File Search ASP.NET edition allows remote attackers to inject arbitrary web script…
CVE-2007-42972007-08-10Multiple cross-site scripting (XSS) vulnerabilities in yorumkaydet.asp in Dersimiz Haber Ekleme Modulu allow remote attackers to inject arbitrary web script or…
CVE-2007-38852007-07-18Cross-site scripting (XSS) vulnerability in philboard_search.asp in husrevforum 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the se…
CVE-2007-38842007-07-18SQL injection vulnerability in philboard_forum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. N…
CVE-2006-71612007-03-07SQL injection vulnerability in giris_yap.asp in Hazir Site 2.0 allows remote attackers to bypass authentication via the (1) k_a class or (2) sifre parameter.
CVE-2006-63372006-12-07Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to execute arbitrary SQL commands via the (…
CVE-2006-50232006-09-27SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the kategori parameter.