← Back

Aspthai Forums

aspthai_forums

Vendor: Aspthai.net • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-6872
1Aspthai.net
1Aspthai Forums
Apr 23, 2026
Jul 23, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
ASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/aspthaiForum.mdb.
CVE-2006-0490
1Aspthai.net
1Aspthai Forums
Apr 16, 2026
Feb 1, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field.