CVE-2006-1541

Опубликовано: 30 мар. 2006

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter.

Ссылки

http://marc.info/?l=full-disclosure&m=114367573519326&w=2
http://secunia.com/advisories/19441
http://www.nukedx.com/?viewdoc=22
Exploit
http://www.osvdb.org/24256
http://www.securityfocus.com/archive/1/429487/100/0/threaded
http://www.securityfocus.com/bid/17309
http://www.vupen.com/english/advisories/2006/1164
https://exchange.xforce.ibmcloud.com/vulnerabilities/25544
https://www.exploit-db.com/exploits/1623
http://marc.info/?l=full-disclosure&m=114367573519326&w=2
http://secunia.com/advisories/19441
http://www.nukedx.com/?viewdoc=22
Exploit
http://www.osvdb.org/24256
http://www.securityfocus.com/archive/1/429487/100/0/threaded
http://www.securityfocus.com/bid/17309
http://www.vupen.com/english/advisories/2006/1164
https://exchange.xforce.ibmcloud.com/vulnerabilities/25544
https://www.exploit-db.com/exploits/1623

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ezaspsite:ezaspsite:*:*:*:*:*:*:*:*

Версия до 2.0_rc3 (включая)

EPSS

Процентиль: 81%

0.01477

Низкий

7.8 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-8j7g-q3jq-xg82

github

почти 4 года назад