Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-6115. PoCs published by ajann.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in fipsCMS <= v4.5 via the 'index.asp' page. It crafts a malicious SQL query to extract the admin password from the database.
Description
SQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by ajann · perlwebappsasp
https://www.exploit-db.com/exploits/2828
This Perl script exploits a SQL injection vulnerability in fipsCMS <= v4.5 via the 'index.asp' page. It crafts a malicious SQL query to extract the admin password from the database.
Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
fipsCMS <= v4.5
No auth needed
Prerequisites:
Target must be running fipsCMS <= v4.5 · Target must have the vulnerable 'index.asp' page accessible
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (4)
Core 4
Core References
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/21258
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/23061
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4681
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/2828
Scores
EPSS
0.0113
EPSS Percentile
62.3%
Details
Status
published
Products (1)
fipsasp/fipscms
< 4.5
Published
Nov 26, 2006
Tracked Since
Feb 18, 2026