Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the strAsgSknPageBgColour parameter to settings_skin.asp, which is stored in inc_skin_file.asp.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-06-23T00:00:00

Updated: 2024-08-07T18:16:06.441Z

Reserved: 2006-06-22T00:00:00

Link: CVE-2006-3184

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2006-06-23T00:02:00.000

Modified: 2024-11-21T00:13:01.023

Link: CVE-2006-3184

cve-icon Redhat

No data.