CVE-2005-3385

SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3384

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3383

SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3384

The CVE-2005-3384 entry describes an SQL injection vulnerability in Techno Dreams Guest Book script. The issue allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp. Documented impact indicates unauthenticated access with p...

CVE-2005-3386

The CVE-2005-3386 entry describes a SQL injection vulnerability in Techno Dreams Web Directory script. Affected component: admin/login.asp (userid parameter) which allows remote attackers to execute arbitrary SQL commands and bypass authentication. This is the core vulnerability and its direct im...

CVE-2005-3383

CVE-2005-3383 is a SQL injection vulnerability in Techno Dreams Announcement script, exploitable via the userid parameter in admin/login.asp. Affected component is the login/authentication flow; root cause is unsafely constructed SQL queries allowing remote attackers to execute arbitrary SQL and ...

CVE-2005-3384

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3385

SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3386

SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3383

SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3385

The CVE-2005-3385 entry describes a SQL injection vulnerability in Techno Dreams Mailing List script that allows remote attackers to execute arbitrary SQL and bypass authentication via the userid parameter in admin/login.asp. Affected component: the Mailing List script; vulnerability type: SQL in...

advisory-103.txt

KAPDA::9Techno Dreams Scripts Vulnerabilities KAPDA New advisory Vulnerable products : Techno Dreams Announcement Script Techno Dreams Guestbook Script Techno Dreams Mailing List Script Techno Dreams WebDirectory Script Vendor: http://www.t-dreams.com/ Risk: High Vulnerability: Sql injection Date...

[KAPDA::#9] Techno Dreams Scripts Vulnerabilities

KAPDA::9Techno Dreams Scripts Vulnerabilities KAPDA New advisory Vulnerable products : Techno Dreams Announcement Script Techno Dreams Guestbook Script Techno Dreams Mailing List Script Techno Dreams WebDirectory Script Vendor: http://www.t-dreams.com/ Risk: High Vulnerability: Sql injection Date...

Techno Dreams (Multiple Scripts) - Multiple SQL Injections

Techno Dreams Multiple Scripts - Multiple SQL Injections source: https://www.securityfocus.com/bid/15215/info Multiple Techno Dreams scripts are prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input before...