Vulnerabilities > CVE-2006-5927 - SQL Injection vulnerability in ASP Scripter Easy Portal and Live Support

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

asp-scripter

NVD

Published: 2006-11-16

Updated: 2018-10-17

Summary

SQL injection vulnerability in cpLogin.asp in ASP Scripter Easy Portal 1.4 and Live Support 1.3 allows remote attackers to execute arbitrary SQL commands via the Password parameter.

Vulnerable Configurations

Part	Description	Count
Application	Asp_Scripter ASP Scripter Easy Portal 1.4 ASP Scripter Live Support 1.3	2

References

http://secunia.com/advisories/22856
http://securityreason.com/securityalert/1874
http://www.securityfocus.com/archive/1/451370/100/0/threaded
http://www.securityfocus.com/bid/21031
http://www.vupen.com/english/advisories/2006/4499