CVE-2006-0184

Multiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to goto.asp or (2) password parameter to includeloginuser.asp.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.47% chance of exploitation in the next 30 days, 73rd percentile

Published

2006-01-12

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploitlabs.com/files/advisories/EXPL-A-2006-001-asptopsites.txt

Security advisories

• http://secunia.com/advisories/18408

References

• CVE Record
• NVD entry