{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-03-29T05:00:00.000Z", "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T18:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1623", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/1623"}, {"name": "19441", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19441"}, {"name": "ADV-2006-1164", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/1164"}, {"name": "17309", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/17309"}, {"name": "24256", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/24256"}, {"name": "ezaspsite-default-sql-injection(25544)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25544"}, {"name": "20060329 EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/429487/100/0/threaded"}, {"name": "20060329 EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://marc.info/?l=full-disclosure&m=114367573519326&w=2"}, {"tags": ["x_refsource_MISC"], "url": "http://www.nukedx.com/?viewdoc=22"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-1541", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1623", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/1623"}, {"name": "19441", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19441"}, {"name": "ADV-2006-1164", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/1164"}, {"name": "17309", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17309"}, {"name": "24256", "refsource": "OSVDB", "url": "http://www.osvdb.org/24256"}, {"name": "ezaspsite-default-sql-injection(25544)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25544"}, {"name": "20060329 EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/429487/100/0/threaded"}, {"name": "20060329 EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.", "refsource": "FULLDISC", "url": "http://marc.info/?l=full-disclosure&m=114367573519326&w=2"}, {"name": "http://www.nukedx.com/?viewdoc=22", "refsource": "MISC", "url": "http://www.nukedx.com/?viewdoc=22"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:19:48.672Z"}, "title": "CVE Program Container", "references": [{"name": "1623", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/1623"}, {"name": "19441", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19441"}, {"name": "ADV-2006-1164", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/1164"}, {"name": "17309", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/17309"}, {"name": "24256", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/24256"}, {"name": "ezaspsite-default-sql-injection(25544)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25544"}, {"name": "20060329 EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/429487/100/0/threaded"}, {"name": "20060329 EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://marc.info/?l=full-disclosure&m=114367573519326&w=2"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.nukedx.com/?viewdoc=22"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-1541", "datePublished": "2006-03-30T16:00:00.000Z", "dateReserved": "2006-03-30T05:00:00.000Z", "dateUpdated": "2024-08-07T17:19:48.672Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ezaspsite:ezaspsite:*:*:*:*:*:*:*:*", "matchCriteriaId": "1A88D784-6700-49BD-B4AD-3887EAB385C8", "versionEndIncluding": "2.0_rc3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n SQL en Default.asp en EzASPSite 2.0 RC3 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios y obtener el hash SHA1 de la contrase\u00f1a de admin a trav\u00e9s del par\u00e1metro Scheme."}], "id": "CVE-2006-1541", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 7.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-03-30T11:02:00.000", "references": [{"source": "cve@mitre.org", "url": "http://marc.info/?l=full-disclosure&m=114367573519326&w=2"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/19441"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.nukedx.com/?viewdoc=22"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/24256"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/429487/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/17309"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/1164"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25544"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/1623"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=full-disclosure&m=114367573519326&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/19441"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.nukedx.com/?viewdoc=22"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/24256"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/429487/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/17309"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/1164"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25544"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/1623"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}