Unscored CVE-2005-3386 EUVD-2005-3385GHSA-8fp6-9gv8-pr92

SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass auth…

Published Oct 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.

References

http://www.kapda.ir/advisory-103.html
15215 vdb-entry
ADV-2005-2222 vdb-entry
20331 vdb-entry
120 third-party-advisory
17354 third-party-advisory
20051026 [KAPDA::#9] Techno Dreams Scripts Vulnerabilities mailing-list