CVE-2006-0184

Description

Multiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to goto.asp or (2) password parameter to includeloginuser.asp.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24072

http://www.vupen.com/english/advisories/2006/0146

http://www.osvdb.org/22330

http://secunia.com/advisories/18408

http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0351.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS