NuytsTech Security

CVE-2006-1541

by ·

SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter.

Date published : 2006-03-30

http://www.securityfocus.com/bid/17309

http://www.securityfocus.com/archive/1/429487/100/0/threaded

Tags: