Abczone.it : Security Vulnerabilities CVSS score >= 5
SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.
| Max Base Score | 7.5 |
| Published | 2005-05-03 |
| Updated | 2008-09-05 |
| EPSS | 0.32% |
Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the plaintext username and password.
| Max Base Score | 5.0 |
| Published | 2004-12-31 |
| Updated | 2017-07-11 |
| EPSS | 0.41% |
2 vulnerabilities found