Vulnerabilities > CVE-2006-5987 - SQL Injection vulnerability in Aspintranet 1.2

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
aspintranet
exploit available
NVD
Published: 2006-11-20
Updated: 2018-10-17

Summary

SQL injection vulnerability in default.asp in ASPintranet, possibly 1.2, allows remote attackers to execute arbitrary SQL commands via the a parameter.

Vulnerable Configurations

Part Description Count
Application
Aspintranet
1

Exploit-Db

descriptionASPIntranet 2.1 Default.ASP SQL Injection Vulnerability. CVE-2006-5987 . Webapps exploit for asp platform
idEDB-ID:29011
last seen2016-02-03
modified2006-11-14
published2006-11-14
reporterAria-Security Team
sourcehttps://www.exploit-db.com/download/29011/
titleASPIntranet 2.1 Default.ASP SQL Injection Vulnerability

References