CVE-2006-3184

Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the…

published June 23, 2006

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the strAsgSknPageBgColour parameter to settings_skin.asp, which is stored in inc_skin_file.asp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02290 · 83.1th percentile
Published
2006-06-23T00:00Z
EPSS history
Timeline
  • 23 JUN 00:00Z
    Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the…
    cvelistv5