CVE-2006-0184

Published: Jan 12, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to goto.asp or (2) password parameter to includeloginuser.asp.

Affected (1)

Products: Mainenet Enterprises: Asptopsites

Mainenet Enterprises

1 product

Asptopsites

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mainenet Enterprises Asptopsites	All versions

References (12)

http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0351.html

Source: cve@mitre.org

http://secunia.com/advisories/18408

Source: cve@mitre.org

Vendor Advisory

http://www.exploitlabs.com/files/advisories/EXPL-A-2006-001-asptopsites.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/22330

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0146

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24072

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0351.html