nextweb records

3 published records for vendor nextweb.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2005-1834No exploit	SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authenticatnextweb · nextweb \(i\)site pre-auth RCE Auth bypass SQL injection	High7.5	—	1.4%	Jun 1, 2005
21Monitor	CVE-2005-1835No exploit	NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensinextweb · nextweb \(i\)site · CWE-552 Pre-auth	Medium5.0	—	2.0%	Jun 1, 2005
21Monitor	CVE-2005-1836No exploit	NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard reqnextweb · nextweb \(i\)site Pre-auth Denial of service	Medium5.0	—	1.8%	Jun 1, 2005

CVE-2005-1834
30Monitor
SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authenticat
HighCVSS 7.5No exploitEPSS 1%
nextweb · nextweb \(i\)siteJun 1, 2005
CVE-2005-1835
21Monitor
NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensi
MediumCVSS 5.0No exploitEPSS 2%
- Pre-auth
nextweb · nextweb \(i\)siteJun 1, 2005
CVE-2005-1836
21Monitor
NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard req
MediumCVSS 5.0No exploitEPSS 2%
- Pre-auth
- Denial of service
nextweb · nextweb \(i\)siteJun 1, 2005