high7.5Public exploit code
CVE-2005-2035
SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cool Cafe Chat 1.2.1 - 'login.asp' SQL Injection2005-06-16 · webapps · asp · Verified
Impact
SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cool Cafe Chat | Cool Cafe Chat | Version 1.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt
- http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html
- http://securitytracker.com/id?1014221
- http://www.osvdb.org/17349
- http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt
- http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html
- http://securitytracker.com/id?1014221
- http://www.osvdb.org/17349