Back

CVE-2005-3384

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.

Published: Oct 30, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
techno_dreams techno_dreams_guest_book *

GitHub Security Advisory GHSA-7783-6q32-p3qm

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.58%

Top 26% most likely to be exploited

Threat Score 30.5 / 100

Data Sources

NVD EPSS GitHub