CVE-2005-3386

The CVE-2005-3386 entry describes a SQL injection vulnerability in Techno Dreams Web Directory script. Affected component: admin/login.asp (userid parameter) which allows remote attackers to execute arbitrary SQL commands and bypass authentication. This is the core vulnerability and its direct im...

CVE-2007-2979

Techno Dreams Web Directory / Search Engine 2.0 is affected by an improper access control vulnerability: sensitive data stored under the web root (Database.mdb) can be downloaded via a direct request. This CVE entry is corroborated across NVD/related records; the root cause is insufficient access...