7.5
CVE-2006-3580
- EPSS 1.22%
- Veröffentlicht 13.07.2006 10:05:00
- Zuletzt bearbeitet 16.06.2026 22:27:20
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the order parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Asp Stats Generator ≫ Asp Stats Generator Version <= 2.1.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.22% | 0.647 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/20721
http://www.hamid.ir/security/aspstats.txt
https://www.exploit-db.com/exploits/1931
http://securitytracker.com/id?1016336
http://www.securityfocus.com/bid/18512
https://exchange.xforce.ibmcloud.com/vulnerabilities/27283