Unscored CVE-2005-1834 EUVD-2005-1836GHSA-qj9g-6jwv-pw3c

SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentica…

Published Jun 2, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.

References

20050601 [ZH2005-13SA] NEXTWEB (i)Site website management multiple mailing-list
15560 third-party-advisory
1014085 vdb-entry