CVE-2006-1541

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-30 · updated 2026-06-16

Description

SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter.

Affected products

Ezaspsite: through 2.0_rc3

References

http://marc.info/?l=full-disclosure&m=114367573519326&w=2
http://secunia.com/advisories/19441
http://www.nukedx.com/?viewdoc=22
http://www.osvdb.org/24256
http://www.securityfocus.com/archive/1/429487/100/0/threaded
http://www.securityfocus.com/bid/17309
http://www.vupen.com/english/advisories/2006/1164
https://exchange.xforce.ibmcloud.com/vulnerabilities/25544
https://www.exploit-db.com/exploits/1623
http://marc.info/?l=full-disclosure&m=114367573519326&w=2
http://secunia.com/advisories/19441
http://www.nukedx.com/?viewdoc=22

Get alerted when CVE-2006-1541 or the next vulnerability affects your stack