NuytsTech Security

CVE-2006-0184

by ·

Multiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to goto.asp or (2) password parameter to includeloginuser.asp.

Date published : 2006-01-12

http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0351.html

http://www.exploitlabs.com/files/advisories/EXPL-A-2006-001-asptopsites.txt

Tags: