CVE-2006-2794 - Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified id parameter

HIGH

Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified id parameter

Published Jun 3, 2006

7.8

HIGH

CVSS 2.0

EPSS 2.97%

Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified id parameter.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://secunia.com/advisories/20355		third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
http://securityreason.com/securityalert/1021		third-party-advisoryx_refsource_SREASON
http://www.nukedx.com/?viewdoc=39		x_refsource_MISCExploitVendor Advisory
http://www.securityfocus.com/archive/1/435287/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/26859		vdb-entryx_refsource_XF

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jun 3, 2006

Updated Aug 7, 2024

Reserved Jun 2, 2006

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a