CVE-2006-5892

THE NET Guys Aspired2poll < 1.0 - SQL Injection

Title source: rule

Description

SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ajann · perlwebappsasp

https://www.exploit-db.com/exploits/2746

View Code ZIP pw:eip

References (6)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/451320/100/0/threaded

[Exploit] http://www.securityfocus.com/bid/20987

[Vendor Advisory] http://secunia.com/advisories/22796

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/4428

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/30160

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2746

Scores

EPSS 0.0202

EPSS Percentile 83.8%

Details

Status published

Products (1)

the_net_guys/aspired2poll < 1.0

Published Nov 14, 2006

Tracked Since Feb 18, 2026