Unscored CVE-2005-3385 EUVD-2005-3384GHSA-qq6w-r4g7-hqp4

SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authe…

Published Oct 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.

References

http://www.kapda.ir/advisory-103.html
15215 vdb-entry
ADV-2005-2222 vdb-entry
20331 vdb-entry
17354 third-party-advisory
20051026 [KAPDA::#9] Techno Dreams Scripts Vulnerabilities mailing-list