CVE-2006-0490

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-01 · updated 2026-06-16

Description

SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field.

Affected products

Aspthai.Net Aspthai Forums: through 8.0

References

http://marc.info/?l=bugtraq&m=113837847503661&w=2
http://secunia.com/advisories/18636
http://securityreason.com/securityalert/381
http://securitytracker.com/id?1015548
http://www.osvdb.org/22790
http://www.securityfocus.com/bid/16404
http://www.vupen.com/english/advisories/2006/0372
https://exchange.xforce.ibmcloud.com/vulnerabilities/24359
http://marc.info/?l=bugtraq&m=113837847503661&w=2
http://secunia.com/advisories/18636
http://securityreason.com/securityalert/381
http://securitytracker.com/id?1015548

Get alerted when CVE-2006-0490 or the next vulnerability affects your stack