HOMEVULNERABILITIESVENDORSIisworks

IisworksCVEs & Vulnerabilities

6 CVEs affecting Iisworks products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

6 CVEs→ All vendors

Most Affected Products

aspknowledgebase 3listpics 2asp listpics 1
CVE-2006-6350CRITICAL

listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb.

7 Dec 2006
10.0
CVSS
CVE-2006-6210HIGHpoc

SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.

1 Dec 2006
7.5
CVSS
CVE-2006-2989MEDIUM

Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter.

13 Jun 2006
4.3
CVSS
CVE-2005-4658MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.

31 Dec 2005
6.8
CVSS
CVE-2005-4047MEDIUMpoc

Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the a parameter.

7 Dec 2005
4.3
CVSS
CVE-2005-3596HIGH

SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.

16 Nov 2005
7.5
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database