CVE-2005-1639

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in Sigmaweb.DLL in Sigma ISP Manager 6.6 allows remote attackers to execute arbitrary SQL commands via the (1) username, (2) password, or (3) domain fields.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/15379
http://www.osvdb.org/16620
http://www.under9round.com/sigma.txtExploit, Vendor Advisory, URL Repurposed
http://secunia.com/advisories/15379
http://www.osvdb.org/16620
http://www.under9round.com/sigma.txtExploit, Vendor Advisory, URL Repurposed

Timeline

Published: May 17, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-16407.5mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a hos CVE-2005-16412.1mod_channel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not allow protected operators to acce CVE-2005-16427.5SQL injection vulnerability in the verify_email function in Woltlab Burning Board 2.x and earlier allows remote attackers to execute arbitra CVE-2005-16435.0The ZCom_BitStream::Deserialize function in Zoidcom 1.0 beta 4 and earlier allows remote attackers to cause a denial of service via a crafte CVE-2005-16446.8Cross-site scripting (XSS) vulnerability in guestbook.php for 1Two Livre d'Or 1.0 allows remote attackers to inject arbitrary web script or CVE-2005-16455.0Keyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient access control, which allows remote attacke CVE-2005-16467.5The default installation of Fastream NETFile FTP/Web Server 7.4.6, which supports FXP, does not require that the IP address in a PORT comman CVE-2005-16477.5Gurgens (GASoft) Guest Book 2.1 stores the db/Genid.dat database file under the web document root with insufficient access control, which al CVE-2005-16487.5Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, whic CVE-2005-16495.0The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote attackers to cause a deni CVE-2005-16505.0The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or no CVE-2005-16517.5Directory traversal vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to determine the exist