Codefixer: Security Vulnerabilities
CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to db/MailingList.mdb.
CVSS Score
5.0
EPSS Score
0.025
Published
2009-03-02
SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQL commands via the OrderDirection parameter.
CVSS Score
7.5
EPSS Score
0.001
Published
2009-02-05