CVE-2006-2794: Aspsitem

High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days.

Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified id parameter.

Affected products

• Aspsitem Aspsitem: up to and including 2.0; version 1.83 only

Published 2006-06-03. Last modified 2026-06-16.