Iisworks develops a focused line of ASP-based web applications and knowledge-base tools that serve primarily as niche content-management and information-sharing platforms. Its vulnerability exposure centers on input-handling weaknesses endemic to web application development, particularly cross-site scripting flaws in page-generation logic, and frequently acquires public exploit code. Current severity, exploitation activity, and exposure metrics are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Iisworks over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-6210HIGH SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. | Dec 1, 2006 | 7.5 | 28 | NO | YES |
CVE-2006-6350HIGH listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb. | Dec 7, 2006 | 10.0 | 25 | NO | NO |
CVE-2005-4047MEDIUM Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the a parameter. | Dec 7, 2005 | 4.3 | 21 | NO | YES |
CVE-2005-3596HIGH SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in | Nov 16, 2005 | 7.5 | 19 | NO | NO |
CVE-2005-4658MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors | Dec 31, 2005 | 6.8 | 18 | NO | NO |
CVE-2006-2989MEDIUM Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter. | Jun 13, 2006 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Iisworks.
Media articles that mention a CVE ID that affects a product developed by Iisworks — matched by CVE ID, not by vendor name.