high7.5
CVE-2005-3836
SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter.
Impact
SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Desklance | Desklance | through 2.3 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/11/desklance-vuln.html
- http://secunia.com/advisories/17730
- http://www.vupen.com/english/advisories/2005/2575
- http://pridels0.blogspot.com/2005/11/desklance-vuln.html
- http://secunia.com/advisories/17730
- http://www.vupen.com/english/advisories/2005/2575