CVE-2005-3384

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=113035773010381&w=2
http://secunia.com/advisories/17354/Vendor Advisory
http://www.kapda.ir/advisory-103.htmlVendor Advisory
http://www.osvdb.org/20331Exploit
http://www.securityfocus.com/bid/15215
http://www.vupen.com/english/advisories/2005/2222
http://marc.info/?l=bugtraq&m=113035773010381&w=2
http://secunia.com/advisories/17354/Vendor Advisory
http://www.kapda.ir/advisory-103.htmlVendor Advisory
http://www.osvdb.org/20331Exploit
http://www.securityfocus.com/bid/15215
http://www.vupen.com/english/advisories/2005/2222

Timeline

Published: Oct 30, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-33857.5SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authen CVE-2005-33867.5SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass authe CVE-2005-33874.6The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary file CVE-2005-33884.3Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to injec CVE-2005-33895.0The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable th CVE-2005-33907.5The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to mod CVE-2005-33917.5Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vec CVE-2005-33927.5Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and CVE-2005-33937.5Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code vi CVE-2005-33947.5Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the (1 CVE-2005-33957.5SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter.CVE-2005-33967.5Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitra