high7.5Public exploit code

CVE-2005-3423

Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Subdreamer 2.2.1 - SQL Injection / Command Execution2005-10-31 · webapps · php · Verified

Impact

Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php.

Affected products

Vendor	Product	Affected versions
Subdreamer	Subdreamer	Version 2.2.1

Public exploit code

Impact

Affected products

References