CVE-2006-3184

Published: Jun 23, 2006Modified: Apr 16, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the strAsgSknPageBgColour parameter to settings_skin.asp, which is stored in inc_skin_file.asp.

Affected (1)

Products: Asp Stats Generator: Asp Stats Generator

Asp Stats Generator

1 product

Asp Stats Generator

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Asp Stats Generator Asp Stats Generator	version ≤ 2.1.1

References (12)

http://blog.asp-stats.com/index.php/2006/06/18/asp-stats-generator-v212/

Source: cve@mitre.org

http://secunia.com/advisories/20721

Source: cve@mitre.org

Vendor Advisory

http://www.hamid.ir/security/aspstats.txt

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2414

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27284

Source: cve@mitre.org

https://www.exploit-db.com/exploits/1931

Source: cve@mitre.org

http://blog.asp-stats.com/index.php/2006/06/18/asp-stats-generator-v212/