Vulnerabilities (CVE)

Filtered by vendor Asp Stats Generator Subscribe
Filtered by product Asp Stats Generator
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-3580 1 Asp Stats Generator 1 Asp Stats Generator 2024-02-04 7.5 HIGH N/A
SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the order parameter.
CVE-2006-3184 1 Asp Stats Generator 1 Asp Stats Generator 2024-02-04 4.0 MEDIUM N/A
Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the strAsgSknPageBgColour parameter to settings_skin.asp, which is stored in inc_skin_file.asp.