CVE-2005-3423

Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, © phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php.