high7.5Public exploit code
CVE-2005-1805
SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote attackers to execute arbitrary SQL comman…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OS4E - 'login.asp' SQL Injection2005-05-28 · webapps · asp · Verified
Impact
SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote attackers to execute arbitrary SQL commands via the password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Solutions For Educators | Online Solutions For Educators | All versions |
References
- NVD record
- CVE.org record
- http://securitytracker.com/id?1014072
- http://www.securityfocus.com/bid/13804
- http://www.under9round.com/os4e.txt
- http://www.vupen.com/english/advisories/2005/0645
- http://securitytracker.com/id?1014072
- http://www.securityfocus.com/bid/13804
- http://www.under9round.com/os4e.txt
- http://www.vupen.com/english/advisories/2005/0645