aspportal kayıtları
aspportal üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2006-1353Kavram kanıtı | Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the daspportal · aspportal | Yüksek7,5 | — | %4,3 | 21 Mar 2006 |
30İzleyin | CVE-2006-1262İstismar yok | Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors.aspportal · aspportal | Yüksek7,5 | — | %1,5 | 18 Mar 2006 |
30İzleyin | CVE-2006-5879Kavram kanıtı | SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands viaspportal · aspportal | Yüksek7,5 | — | %1,2 | 14 Kas 2006 |
30İzleyin | CVE-2008-5268Kavram kanıtı | SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the Topicaspportal · aspportal · CWE-89 | Yüksek7,5 | — | %0,9 | 28 Kas 2008 |
21İzleyin | CVE-2008-6382Kavram kanıtı | ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloadaspportal · aspportal · CWE-264 | Orta5,0 | — | %2,5 | 2 Mar 2009 |
17İzleyin | CVE-2006-1261İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via unknaspportal · aspportal | Orta4,3 | — | %1,3 | 18 Mar 2006 |
- CVE-2006-135331İzleyin
Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the d
YüksekCVSS 7,5Kavram kanıtıEPSS %4aspportal · aspportal21 Mar 2006
- CVE-2006-126230İzleyin
Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors.
YüksekCVSS 7,5İstismar yokEPSS %1aspportal · aspportal18 Mar 2006
- CVE-2006-587930İzleyin
SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands vi
YüksekCVSS 7,5Kavram kanıtıEPSS %1aspportal · aspportal14 Kas 2006
- CVE-2008-526830İzleyin
SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the Topic
YüksekCVSS 7,5Kavram kanıtıEPSS %0aspportal · aspportal28 Kas 2008
- CVE-2008-638221İzleyin
ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download
OrtaCVSS 5,0Kavram kanıtıEPSS %2aspportal · aspportal2 Mar 2009
- CVE-2006-126117İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via unkn
OrtaCVSS 4,3İstismar yokEPSS %1aspportal · aspportal18 Mar 2006