CVE-2006-0490

SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2006-02-01

Last modified

2024-08-07

Affected products

• Aspthai Forums (Aspthai.net)

References

• http://marc.info/?l=bugtraq&m=113837847503661&w=2
• http://secunia.com/advisories/18636
• http://securityreason.com/securityalert/381
• http://securitytracker.com/id?1015548
• http://www.osvdb.org/22790
• http://www.securityfocus.com/bid/16404
• http://www.vupen.com/english/advisories/2006/0372
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24359