CVE-2006-5892

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-14 · updated 2026-06-16

Description

SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

The Net Guys Aspired2Poll: through 1.0

References

http://secunia.com/advisories/22796
http://www.securityfocus.com/archive/1/451320/100/0/threaded
http://www.securityfocus.com/bid/20987
http://www.vupen.com/english/advisories/2006/4428
https://exchange.xforce.ibmcloud.com/vulnerabilities/30160
https://www.exploit-db.com/exploits/2746
http://secunia.com/advisories/22796
http://www.securityfocus.com/archive/1/451320/100/0/threaded
http://www.securityfocus.com/bid/20987
http://www.vupen.com/english/advisories/2006/4428
https://exchange.xforce.ibmcloud.com/vulnerabilities/30160
https://www.exploit-db.com/exploits/2746

Get alerted when CVE-2006-5892 or the next vulnerability affects your stack