CVE-2006-1262 - Vulnerability Details - OpenCVE

Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Aspportal	Aspportal

Configuration 1 [-]

cpe:2.3:a:aspportal:aspportal:3.0.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html
http://marc.info/?l=bugtraq&m=114243660409338&w=2
http://secunia.com/advisories/19247
http://securityreason.com/securityalert/592
http://securitytracker.com/id?1015772
http://www.aspportal.net/content/news/News_Item.asp?content_ID=32
http://www.osvdb.org/23919
http://www.securityfocus.com/bid/17114
https://exchange.xforce.ibmcloud.com/vulnerabilities/25234

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-03-19T02:00:00

Updated: 2024-08-07T17:03:28.841Z

Reserved: 2006-03-18T00:00:00

Link: CVE-2006-1262

Vulnrichment

No data.

NVD

Status : Modified

Published: 2006-03-19T02:02:00.000

Modified: 2024-11-21T00:08:27.130

Link: CVE-2006-1262

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-03-14T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "aspportal-multiple-scripts-sql-injection(25234)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25234"}, {"name": "17114", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/17114"}, {"name": "20060314 CodeScan Advisory: Multiple Vulnerabilities In ASPPortal.net", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html"}, {"name": "23919", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/23919"}, {"name": "1015772", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015772"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.aspportal.net/content/news/News_Item.asp?content_ID=32"}, {"name": "592", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/592"}, {"name": "19247", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19247"}, {"name": "20060315 CodeScan Advisory: Multiple Vulnerabilities In ASPPortal.net", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=114243660409338&w=2"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-1262", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "aspportal-multiple-scripts-sql-injection(25234)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25234"}, {"name": "17114", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17114"}, {"name": "20060314 CodeScan Advisory: Multiple Vulnerabilities In ASPPortal.net", "refsource": "FULLDISC", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html"}, {"name": "23919", "refsource": "OSVDB", "url": "http://www.osvdb.org/23919"}, {"name": "1015772", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015772"}, {"name": "http://www.aspportal.net/content/news/News_Item.asp?content_ID=32", "refsource": "CONFIRM", "url": "http://www.aspportal.net/content/news/News_Item.asp?content_ID=32"}, {"name": "592", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/592"}, {"name": "19247", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19247"}, {"name": "20060315 CodeScan Advisory: Multiple Vulnerabilities In ASPPortal.net", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=114243660409338&w=2"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:03:28.841Z"}, "title": "CVE Program Container", "references": [{"name": "aspportal-multiple-scripts-sql-injection(25234)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25234"}, {"name": "17114", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/17114"}, {"name": "20060314 CodeScan Advisory: Multiple Vulnerabilities In ASPPortal.net", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html"}, {"name": "23919", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/23919"}, {"name": "1015772", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015772"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.aspportal.net/content/news/News_Item.asp?content_ID=32"}, {"name": "592", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/592"}, {"name": "19247", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19247"}, {"name": "20060315 CodeScan Advisory: Multiple Vulnerabilities In ASPPortal.net", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=114243660409338&w=2"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-1262", "datePublished": "2006-03-19T02:00:00", "dateReserved": "2006-03-18T00:00:00", "dateUpdated": "2024-08-07T17:03:28.841Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:aspportal:aspportal:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "A03ED9E3-0CED-4DC9-A034-D3B948095E4F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en ASPPortal 3.00 tienen vectores de impacto y ataque desconocidos."}], "id": "CVE-2006-1262", "lastModified": "2024-11-21T00:08:27.130", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-03-19T02:02:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html"}, {"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=114243660409338&w=2"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/19247"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/592"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015772"}, {"source": "cve@mitre.org", "url": "http://www.aspportal.net/content/news/News_Item.asp?content_ID=32"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/23919"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/17114"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25234"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=114243660409338&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/19247"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/592"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015772"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.aspportal.net/content/news/News_Item.asp?content_ID=32"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/23919"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/17114"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25234"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}