Nextweb Nextweb \(I\)site

3 CVEs affecting Nextweb Nextweb \(I\)site. Latest disclosed: 2005-06-01. Critical: 0, High: 0.

Top CVEs affecting Nextweb Nextweb \(I\)site
CVESeverityScorePublishedSummary
CVE-2005-18362005-06-01NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard requests for .jsp file…
CVE-2005-18352005-06-01NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information vi…
CVE-2005-18342005-06-01SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentication via the passwor…