Unscored CVE-2005-3384 EUVD-2005-3383GHSA-7783-6q32-p3qm

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authent…

Published Oct 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.

References

http://www.kapda.ir/advisory-103.html
15215 vdb-entry
ADV-2005-2222 vdb-entry
20331 vdb-entry
17354 third-party-advisory
20051026 [KAPDA::#9] Techno Dreams Scripts Vulnerabilities mailing-list