medium5.0Public exploit code
CVE-2006-2848
links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct request with a modified txtAdministrativePass…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- aspWebLinks 2.0 - SQL Injection / Admin Pass Change2006-06-01 · webapps · asp · Verified
Impact
links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct request with a modified txtAdministrativePassword field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Full Revolution | Aspweblinks | Version 2.0 |