$ cve CVE-2006-2793 JSON

CVE-2006-2793 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 1.3% (pctl 70)

Patch early

A public exploit exists.

SQL injection vulnerability in Anket.asp in ASPSitem 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter.

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	1.32% — more likely to be exploited than 70% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2006-06-03
Last modified	2026-06-16

Vendor	Product
aspsitem	aspsitem

Source	Title	Date
exploit-db	ASPSitem 2.0 - SQL Injection / Database Disclosure	2006-05-28