CVE-2005-3596 SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iisworks aspknowledgebase | All versions | No fix listed |
References
- 20051108 ASPKnowledgebase vulnerable to SQL-inject mailing-list
- 20712 vdb-entry
- 17517 third-party-advisory vendor-advisory
- 15364 vdb-entry
- ADV-2005-2375 vdb-entry
- aspknowledgebase-admin-bypass-security(23038) vdb-entry