CVEvulnerability
CVE-2005-3423
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-11-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php.
Affected configurations
• subdreamer subdreamer 2.2.1
References
- http://rst.void.ru/papers/advisory35.txt Vendor Advisory
- http://secunia.com/advisories/17378 Vendor Advisory
- http://www.osvdb.org/20378 www.osvdb.org
- http://www.osvdb.org/20379 www.osvdb.org
- http://www.osvdb.org/20380 www.osvdb.org
- http://www.osvdb.org/20381 www.osvdb.org
- http://www.osvdb.org/20382 www.osvdb.org
- http://www.osvdb.org/20384 www.osvdb.org
- http://www.securityfocus.com/bid/15238 Exploit
- http://rst.void.ru/papers/advisory35.txt Vendor Advisory
- http://secunia.com/advisories/17378 Vendor Advisory
- http://www.osvdb.org/20378 www.osvdb.org
- http://www.osvdb.org/20379 www.osvdb.org
- http://www.osvdb.org/20380 www.osvdb.org
- http://www.osvdb.org/20381 www.osvdb.org
- http://www.osvdb.org/20382 www.osvdb.org
- http://www.osvdb.org/20384 www.osvdb.org
- http://www.securityfocus.com/bid/15238 Exploit