Skip to content
Noroxi

fullrevolution records

5 published records for vendor fullrevolution.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    5 records
    • CVE-2008-2832
      44Plan

      Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar 2008 allows remote attackers to upload and ex

      CriticalCVSS 10.0Proof of conceptEPSS 11%

      fullrevolution · aspwebcalendar2008Jun 24, 2008

    • CVE-2004-1553
      31Monitor

      SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the log

      HighCVSS 7.5Proof of conceptEPSS 2%

      fullrevolution · aspwebalbumDec 31, 2004

    • CVE-2008-6978
      28Monitor

      Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a f

      MediumCVSS 6.8Proof of conceptEPSS 4%

      fullrevolution · aspwebalbumAug 19, 2009

    • CVE-2009-1223
      20Monitor

      aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers

      MediumCVSS 5.0No exploitEPSS 1%

      fullrevolution · aspwebcalendarApr 2, 2009

    • CVE-2008-6977
      18Monitor

      Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web scr

      MediumCVSS 4.3Proof of conceptEPSS 1%

      fullrevolution · aspwebalbumAug 19, 2009