CVE-2006-3184

The vulnerability CVE-2006-3184 affects the ASP Stats Generator prior to 2.1.2. It is a Direct static code injection vulnerability in which the strAsgSknPageBgColour parameter to settings_skin.asp, stored in inc_skin_file.asp, can allow remote authenticated attackers to execute arbitrary ASP code...