Skip to content
OpenAdvisories

Vendor

ASP-CMS Project

1 known vulnerabilities.

Products

ASP-CMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2019-25765

    ASP-CMS SQL Injection via commentList.asp id Parameter

    ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the applic…

    ASP-CMS Project ASP-CMS