CVE

Id
21996  
CVE No.
CVE-2006-5892  
Status
Candidate  
Description
SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  
Phase
Assigned (20061114)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
211766 21996 CVE-2006-5892 BUGTRAQ:20061111 AspPired2 Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit  View
211767 21996 CVE-2006-5892 URL:http://www.securityfocus.com/archive/1/archive/1/451320/100/0/threaded  View
211768 21996 CVE-2006-5892 MILW0RM:2746  View
211769 21996 CVE-2006-5892 URL:http://milw0rm.com/exploits/2746  View
211770 21996 CVE-2006-5892 BID:20987  View
211771 21996 CVE-2006-5892 URL:http://www.securityfocus.com/bid/20987  View
211772 21996 CVE-2006-5892 VUPEN:ADV-2006-4428  View
211773 21996 CVE-2006-5892 URL:http://www.vupen.com/english/advisories/2006/4428  View
211774 21996 CVE-2006-5892 SECUNIA:22796  View
211775 21996 CVE-2006-5892 URL:http://secunia.com/advisories/22796  View
211776 21996 CVE-2006-5892 XF:asppired2-moreinfo-sql-injection(30160)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61180 JVNDB-2006-003446 Rama CMS の lang.php におけるディレクトリトラバーサルの脆弱性 Rama CMS の lang.php には、register_globals が有効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-5894 21996 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003446.html  View