CVE-2005-3423 | BDVDB-2026-13032 Detail

Description#

Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://rst.void.ru/papers/advisory35.txt
http://www.osvdb.org/20379
http://www.osvdb.org/20380
http://www.osvdb.org/20382
http://www.osvdb.org/20378
http://www.osvdb.org/20381
http://secunia.com/advisories/17378
http://www.securityfocus.com/bid/15238
http://www.osvdb.org/20384

Exploit#

No public exploit known

History#

Version 12005-11-01Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.