CVE-2005-3423
HIGH 7.5EPSS 2.2%
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php.
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 2.17% chance of exploitation in the next 30 days, 82nd percentile
- Published
- 2005-11-01
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://rst.void.ru/papers/advisory35.txt
- http://secunia.com/advisories/17378
- http://www.securityfocus.com/bid/15238