226 matches found
CVE-2005-3362
This CVE entry is rejected/not used; refer to CVE-2005-3153.
CVE-2005-3362
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3153. Reason: This candidate is a reservation duplicate of CVE-2005-3153. Notes: All CVE users should reference CVE-2005-3153 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2005-3153
Affected software: myBloggie 2.1.3 beta and earlier. Vulnerable component: login.php. Root cause / vector: remote attackers can bypass a whitelist regular expression and perform SQL injection via the username parameter when a null character is present, allowing injection into the query string. Th...
CVE-2005-3153
login.php in myBloggie 2.1.3 beta and earlier allows remote attackers to bypass a whitelist regular expression and conduct SQL injection attacks via a username parameter with SQL after a null character, which causes the whitelist check to succeed but injects the SQL into a query string, a differe...
