Asp Nuke
by Asp Nuke
CVEs (13)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2007-2892 | 0.03 | — | 0.01 | May 30, 2007 | Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | |||
| CVE-2006-7152 | 0.03 | — | 0.03 | Mar 7, 2007 | default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values. | |||
| CVE-2006-6070 | 0.03 | — | 0.01 | Nov 22, 2006 | SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrary SQL commands via the StateCode parameter. | |||
| CVE-2005-2066 | 0.03 | — | 0.01 | Jun 29, 2005 | SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID parameter. | |||
| CVE-2005-2065 | 0.03 | — | 0.02 | Jun 29, 2005 | HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the LangCode parameter. | |||
| CVE-2005-2067 | 0.03 | — | 0.01 | Jun 29, 2005 | SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter. | |||
| CVE-2005-2064 | 0.03 | — | 0.02 | Jun 29, 2005 | Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to forgot_password.asp, or the (2) FirstName, (3) LastName, (4) Username, (5) Password, (6) Address1, (7) Address2, (8) City,… | |||
| CVE-2004-1788 | 0.03 | — | 0.03 | Dec 31, 2004 | ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb. | |||
| CVE-2002-0521 | 0.00 | — | 0.02 | Aug 12, 2002 | Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in (1) the name parameter in downloads.asp, (2) the message parameter in Post.asp, or (3) a web site URL in profile.asp. | |||
| CVE-2002-0523 | 0.00 | — | 0.02 | Aug 12, 2002 | ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie. | |||
| CVE-2002-0520 | 0.00 | — | 0.02 | Aug 12, 2002 | Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag. | |||
| CVE-2002-0524 | 0.00 | — | 0.02 | Aug 12, 2002 | ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments, which leak the pathname in an error message. | |||
| CVE-2002-0522 | 0.00 | — | 0.02 | Aug 12, 2002 | ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" cookie. |
- CVE-2007-2892May 30, 2007risk 0.03cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
- CVE-2006-7152Mar 7, 2007risk 0.03cvss —epss 0.03
default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values.
- CVE-2006-6070Nov 22, 2006risk 0.03cvss —epss 0.01
SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrary SQL commands via the StateCode parameter.
- CVE-2005-2066Jun 29, 2005risk 0.03cvss —epss 0.01
SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID parameter.
- CVE-2005-2065Jun 29, 2005risk 0.03cvss —epss 0.02
HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the LangCode parameter.
- CVE-2005-2067Jun 29, 2005risk 0.03cvss —epss 0.01
SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter.
- CVE-2005-2064Jun 29, 2005risk 0.03cvss —epss 0.02
Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to forgot_password.asp, or the (2) FirstName, (3) LastName, (4) Username, (5) Password, (6) Address1, (7) Address2, (8) City,…
- CVE-2004-1788Dec 31, 2004risk 0.03cvss —epss 0.03
ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb.
- CVE-2002-0521Aug 12, 2002risk 0.00cvss —epss 0.02
Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in (1) the name parameter in downloads.asp, (2) the message parameter in Post.asp, or (3) a web site URL in profile.asp.
- CVE-2002-0523Aug 12, 2002risk 0.00cvss —epss 0.02
ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.
- CVE-2002-0520Aug 12, 2002risk 0.00cvss —epss 0.02
Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag.
- CVE-2002-0524Aug 12, 2002risk 0.00cvss —epss 0.02
ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments, which leak the pathname in an error message.
- CVE-2002-0522Aug 12, 2002risk 0.00cvss —epss 0.02
ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" cookie.