Back
CVE-2005-3384
SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
Published: Oct 30, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| techno_dreams | techno_dreams_guest_book | * |
GitHub Security Advisory GHSA-7783-6q32-p3qm
SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute...
References (12)
- http://marc.info/?l=bugtraq&m=113035773010381&w=2
- http://secunia.com/advisories/17354/ Vendor Advisory
- http://www.kapda.ir/advisory-103.html Vendor Advisory
- http://www.osvdb.org/20331 Exploit
- http://www.securityfocus.com/bid/15215
- http://www.vupen.com/english/advisories/2005/2222
- http://marc.info/?l=bugtraq&m=113035773010381&w=2
- http://secunia.com/advisories/17354/ Vendor Advisory
- http://www.kapda.ir/advisory-103.html Vendor Advisory
- http://www.osvdb.org/20331 Exploit
- http://www.securityfocus.com/bid/15215
- http://www.vupen.com/english/advisories/2005/2222
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
1.58%
Top 26% most likely to be exploited
Threat Score
30.5 / 100
Data Sources
NVD
EPSS
GitHub