CVE-2006-1541
UnknownEPSS 2.26%
Last modified
CVE-2006-1541 is a vulnerability of currently unknown severity. SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter.. EPSS estimates a 2.26% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ezaspsite | Ezaspsite | <= 2.0_rc3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-1541?
SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter.
How severe is CVE-2006-1541?
Severity scoring for CVE-2006-1541 is pending analysis. The EPSS model estimates a 2.26% probability of exploitation in the next 30 days.
How do I fix CVE-2006-1541?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-1535Cross-site scripting (XSS) vulnerability in login.php in Pho…
- CVE-2006-1536Multiple SQL injection vulnerabilities in Phoetux.net PhxCon…
- CVE-2006-1537Craig Knudsen WebCalendar 1.1.0-CVS allows remote attackers …
- CVE-2006-1538The Enova X-Wall ASIC encrypts with a key obtained via Micro…
- CVE-2006-1539Multiple buffer overflows in the checkscores function in sco…
- CVE-2006-1540MSO.DLL in Microsoft Office 2000, Office XP (2002), and Offi…
- CVE-2006-1542Stack-based buffer overflow in Python 2.4.2 and earlier, run…
- CVE-2006-1543Multiple SQL injection vulnerabilities in vscripts (aka Kuba…
- CVE-2006-1544Multiple cross-site scripting (XSS) vulnerabilities in news.…
- CVE-2006-1545Direct static code injection vulnerability in admin/config.p…
- CVE-2006-1546Apache Software Foundation (ASF) Struts before 1.2.9 allows …
- CVE-2006-1547ActionForm in Apache Software Foundation (ASF) Struts before…7.5
Are you affected by CVE-2006-1541?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST