VULNERABILITY INTELLIGENCE

CVE-2006-3184

CVSS score4 MEDIUM
EPSS probability2.29%
CISA KEVNot currently listed
Published2006-06-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:N

Description

Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the strAsgSknPageBgColour parameter to settings_skin.asp, which is stored in inc_skin_file.asp.

Primary references