$ cve CVE-2006-7152 JSON

CVE-2006-7152 EXPLOIT

8.5

HIGH · CVSS 2.0 · EPSS 2.6% (pctl 85)

Patch early

A public exploit exists.

default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values.

CVSS	8.5 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:S/C:C/I:C/A:C
EPSS	2.62% — more likely to be exploited than 85% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2007-03-07
Last modified	2026-06-16

Vendor	Product
asp-nuke	asp-nuke

Source	Title	Date
exploit-db	ASP-Nuke Community 1.5 - Cookie Privilege Escalation	2006-11-25