CVE-2005-3383

CVE-2005-3383 is a SQL injection vulnerability in Techno Dreams Announcement script, exploitable via the userid parameter in admin/login.asp. Affected component is the login/authentication flow; root cause is unsafely constructed SQL queries allowing remote attackers to execute arbitrary SQL and ...