CVEvulnerability
CVE-2005-3852
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-11-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in search.asp in Online Work Order Suite (OWOS) Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
Affected configurations
• onlinetechtools.com owos lite 3.0
References
- http://pridels0.blogspot.com/2005/11/owos-lite-30-sql-inj.html pridels0.blogspot.com
- http://secunia.com/advisories/17711 Vendor Advisory
- http://www.osvdb.org/21116 www.osvdb.org
- http://www.vupen.com/english/advisories/2005/2584 www.vupen.com
- http://pridels0.blogspot.com/2005/11/owos-lite-30-sql-inj.html pridels0.blogspot.com
- http://secunia.com/advisories/17711 Vendor Advisory
- http://www.osvdb.org/21116 www.osvdb.org
- http://www.vupen.com/english/advisories/2005/2584 www.vupen.com