← Back

Aspindir

aspindir

34 CVEs • 24 products

Products (24)

Click to collapse
Toggle
Xweblog
xweblog
3 CVEs
Angelo Emlak
angelo-emlak
3 CVEs
Shibby Shop
shibby_shop
3 CVEs
Husrevforum
husrevforum
2 CVEs
Text File Search
text_file_search
2 CVEs
Philboard
philboard
2 CVEs
Kisisel Radyo Script
kisisel_radyo_script
2 CVEs
Aspee Ziyaretci Defteri
aspee_ziyaretci_defteri
1 CVE
Hazirsite
hazirsite
1 CVE
Dersimiz Haber Ekleme Modulu
dersimiz_haber_ekleme_modulu
1 CVE
Meto Forum
meto_forum
1 CVE
Pcshey Portal
pcshey_portal
1 CVE
Mini Nuke Freehost
mini_nuke_freehost
1 CVE
Munzursoft Web Portal W3
munzursoft_web_portal_w3
1 CVE
Ayco Okul Portali
ayco_okul_portali
1 CVE
Dizi Portali
dizi_portali
1 CVE
Iltaweb Alisveris Sistemi
iltaweb_alisveris_sistemi
1 CVE
Mydesign Sayac
mydesign_sayac
1 CVE
Batmanportal
batmanportal
1 CVE
Shader Tv
shader_tv
1 CVE
Uranyumsoft Listing Service
uranyumsoft_listing_service
1 CVE
Erolife Ajxgaleri Vt
erolife_ajxgaleri_vt
1 CVE
Lookmer Muzik Portal
lookmer_muzik_portal
1 CVE
Krm Haber
krm_haber
1 CVE

CVEs (34)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-4856
1Aspindir
1Xweblog
Apr 29, 2026
Oct 5, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter.
CVE-2010-4855
1Aspindir
1Xweblog
Apr 29, 2026
Oct 5, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale_id parameter.
CVE-2010-4145
1Aspindir
1Kisisel Radyo Script
Apr 29, 2026
Nov 2, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb.
CVE-2010-4144
1Aspindir
1Kisisel Radyo Script
Apr 29, 2026
Nov 2, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter.
CVE-2010-1736
1Aspindir
1Krm Haber
Apr 29, 2026
May 6, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for d_atabase/Krmdb.mdb.
CVE-2009-4820
1Aspindir
1Angelo Emlak
Apr 29, 2026
Apr 27, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for veribaze/angelo.mdb.
CVE-2010-1116
1Aspindir
1Lookmer Muzik Portal
Apr 29, 2026
Mar 25, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for dbmdb/LookMerSarkiMDB.mdb.
CVE-2010-1064
1Aspindir
1Erolife Ajxgaleri Vt
Apr 29, 2026
Mar 23, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/ajxgaleri.mdb.
CVE-2009-4585
1Aspindir
1Uranyumsoft Listing Service
Apr 23, 2026
Jan 6, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db.mdb.
CVE-2008-6641
1Aspindir
1Shader Tv
Apr 23, 2026
Apr 7, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to (1) kanal.asp, (2) google.asp, and (3) hakk.asp in yonet/; a...Show more
Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to (1) kanal.asp, (2) google.asp, and (3) hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the (4) username or (5) password fields to yonet/default.asp.Show less
CVE-2008-6640
1Aspindir
1Batmanportal
Apr 23, 2026
Apr 7, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) uyeadmin.asp and (2) profil.asp. NOTE: the provenance of this information is un...Show more
Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) uyeadmin.asp and (2) profil.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2009-0447
1Aspindir
1Mydesign Sayac
Apr 23, 2026
Feb 10, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the user parameter (aka UserName field) or (2) the pass parameter (aka Pass fie...Show more
Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the user parameter (aka UserName field) or (2) the pass parameter (aka Pass field) to (a) admin/admin.asp or (b) the default URI under admin/. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-5707
1Aspindir
1Iltaweb Alisveris Sistemi
Apr 23, 2026
Dec 24, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter.
CVE-2008-5057
1Aspindir
1Dizi Portali
Apr 23, 2026
Nov 13, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the film parameter. NOTE: the provenance of this information is unknown; the details are...Show more
SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the film parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2008-4574
1Aspindir
1Ayco Okul Portali
Apr 23, 2026
Oct 15, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL commands via the linkid parameter.
CVE-2008-4573
1Aspindir
1Munzursoft Web Portal W3
Apr 23, 2026
Oct 15, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat parameter.
CVE-2008-3888
1Aspindir
1Mini Nuke Freehost
Apr 23, 2026
Sep 2, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a member_details action.
CVE-2008-3495
1Aspindir
1Pcshey Portal
Apr 23, 2026
Aug 6, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands via the kid parameter.
CVE-2008-2882
1Aspindir
1Shibby Shop
Apr 23, 2026
Jun 26, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified other impact via a direct request.
CVE-2008-2873
1Aspindir
1Shibby Shop
Apr 23, 2026
Jun 26, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request to Db/urun.mdb.