Skip to content
Noroxi

toddwoolums records

3 published records for vendor toddwoolums.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2008-6739
      31Monitor

      Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gai

      HighCVSS 7.5Proof of conceptEPSS 2%

      toddwoolums · asp downloadApr 21, 2009

    • CVE-2008-5273
      30Monitor

      SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL command

      HighCVSS 7.5Proof of conceptEPSS 1%

      toddwoolums · todd woolums asp news managementNov 28, 2008

    • CVE-2008-5274
      21Monitor

      Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp,

      MediumCVSS 5.0Proof of conceptEPSS 2%

      toddwoolums · todd woolums asp news managementNov 28, 2008