high7.5
CVE-2005-3385
SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the us…
Impact
SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Techno Dreams | Mailing List | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=113035773010381&w=2
- http://secunia.com/advisories/17354/
- http://www.kapda.ir/advisory-103.html
- http://www.osvdb.org/20331
- http://www.securityfocus.com/bid/15215
- http://www.vupen.com/english/advisories/2005/2222
- http://marc.info/?l=bugtraq&m=113035773010381&w=2
- http://secunia.com/advisories/17354/
- http://www.kapda.ir/advisory-103.html
- http://www.osvdb.org/20331
- http://www.securityfocus.com/bid/15215
- http://www.vupen.com/english/advisories/2005/2222