Vulnerabilities > Iisworks > Listpics

DATE CVE VULNERABILITY TITLE RISK
2006-12-07 CVE-2006-6350 Remote Security vulnerability in Iisworks Listpics 5.0
listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb.
network
low complexity
iisworks
critical
 10.0
10
2006-06-13 CVE-2006-2989 Cross-Site Scripting vulnerability in ListPics
Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter.
network
iisworks
4.3
4.3