Unscored CVE-2006-0192 EUVD-2006-0200GHSA-j8r2-gmpj-hxpw

SQL injection vulnerability in Login_Validate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Passw…

Published Jan 13, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Login_Validate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp.

References

20060204 sql injection in ASP Survey mailing-list
ADV-2006-0164 vdb-entry
414 third-party-advisory
aspsurvey-loginvalidate-sql-injection(24087) vdb-entry
18422 third-party-advisory
16496 vdb-entry
22342 vdb-entry