CVE Vulnerabilities

CVE-2006-2794

Published: Jun 03, 2006 | Modified: Oct 18, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:C/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified id parameter.

Affected Software

Name Vendor Start Version End Version
Aspsitem Aspsitem * 2.0
Aspsitem Aspsitem 1.83 1.83

References