Vendor archive

toddwoolums CVEs

Beta · best-effort

3 CVEs tagged to vendor toddwoolums — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2008-6739

Published Apr 21, 2009

Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2008-5274

Published Nov 28, 2008

Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp. NOTE: the proven…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2008-5273

Published Nov 28, 2008

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1