Back

CVE-2006-0192

SQL injection vulnerability in Login_Validate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp.

Published: Jan 13, 2006 Modified: Jun 16, 2026
CWE-89

CVSS Metrics

Affected Products (1)

Vendor Product Version
philip_loftin aspsurvey 1.10

GitHub Security Advisory GHSA-j8r2-gmpj-hxpw

SQL injection vulnerability in Login_Validate.asp in ASPSurvey 1.10 allows remote attackers to...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 2.15%

Top 20% most likely to be exploited

Threat Score 30.6 / 100

Data Sources

NVD EPSS GitHub