Vulnerabilities > CVE-2005-2066 - SQL Injection vulnerability in Asp-Nuke 0.80

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
asp-nuke
exploit available
NVD
Published: 2005-06-29
Updated: 2016-10-18

Summary

SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID parameter.

Vulnerable Configurations

Part Description Count
Application
Asp-Nuke
1

Exploit-Db

descriptionASPNuke <= 0.80 (comment_post.asp) SQL Injection Exploit. CVE-2005-2066. Webapps exploit for asp platform
idEDB-ID:1071
last seen2016-01-31
modified2005-06-27
published2005-06-27
reporterAlberto Trivero
sourcehttps://www.exploit-db.com/download/1071/
titleASPNuke <= 0.80 comment_post.asp SQL Injection Exploit

References