Iisworks: >> Listpics Security Vulnerabilities
listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb.
CVSS Score
10.0
EPSS Score
0.008
Published
2006-12-07
Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter.
CVSS Score
4.3
EPSS Score
0.004
Published
2006-06-13