CVE-2005-3836

CVE-2005-3836 affects DeskLance 2.3 and earlier. The issue is a SQL injection through the announce parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD CVSS v2 base score is 7.5 (HIGH) with network vectors, low attack complexity, no authentication required, and partial ...

CVE-2005-3836

SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter...