Unscored CVE-2005-3596 EUVD-2005-3594GHSA-4xx5-phjh-xr95

SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the…

Published Nov 16, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.

References

17517 third-party-advisory
15364 vdb-entry
aspknowledgebase-admin-bypass-security(23038) vdb-entry
20051108 ASPKnowledgebase vulnerable to SQL-inject mailing-list
20712 vdb-entry
ADV-2005-2375 vdb-entry