Nextweb Nextweb (i)site — known CVE vulnerabilities

Every CVE whose affected-product data names Nextweb Nextweb (i)site, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2005-1834 — CVSS 7.5 (high): SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass…
• CVE-2005-1835 — CVSS 5.0 (medium): NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain…
• CVE-2005-1836 — CVSS 5.0 (medium): NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard…