CVE-2006-1353 - Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to exec

CVE-2006-1353

Summary

Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the downloadid parameter in download_click.asp and (2) content_ID parameter in news/News_Item.asp; authenticated administrators can also conduct attacks via (3) user_id parameter to users/add_edit_user.asp, (4) bannerid parameter to banner_adds/banner_add_edit.asp, (5) cat_id parameter to categories/add_edit_cat.asp, (6) Content_ID parameter to News/add_edit_news.asp, (7) download_id parameter to downloads/add_edit_download.asp, (8) Poll_ID parameter to poll/add_edit_poll.asp, (9) contactid parameter to contactus/contactus_add_edit.asp, (10) sortby parameter to poll/poll_list.asp, and (11) unspecified inputs to downloads/add_edit_download.asp.

References

Vulnerable Configurations

cpe:2.3:a:aspportal:aspportal:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:aspportal:aspportal:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:aspportal:aspportal:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:aspportal:aspportal:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:aspportal:aspportal:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:aspportal:aspportal:3.1.1:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 18-10-2018 - 16:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	17174
bugtraq	20060321 ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities 20060322 Re: [SPAM:] - ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities - Email has different SMTP TO: and MIME TO: fields in the email addresses
exploit-db	1597
fulldisc	20060321 ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities 20060322 Re: [SPAM:] - ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities - Email has different SMTP TO: and MIME TO: fields in the email addresses
misc	http://www.nukedx.com/?viewdoc=21
osvdb	24020 24084 24085 24086 24087 24088 24089 24090 24091 24092
secunia	19286
sreason	608
vupen	ADV-2006-1014
xf	aspportal-multiple-aspscripts-sql-injection(25346)

Last major update

18-10-2018 - 16:32

Published

22-03-2006 - 02:02

Last modified

18-10-2018 - 16:32