CVE-2005-3423

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-01 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php.

Affected products

Subdreamer: 2.2.1

References

http://rst.void.ru/papers/advisory35.txt
http://secunia.com/advisories/17378
http://www.osvdb.org/20378
http://www.osvdb.org/20379
http://www.osvdb.org/20380
http://www.osvdb.org/20381
http://www.osvdb.org/20382
http://www.osvdb.org/20384
http://www.securityfocus.com/bid/15238
http://rst.void.ru/papers/advisory35.txt
http://secunia.com/advisories/17378
http://www.osvdb.org/20378

Get alerted when CVE-2005-3423 or the next vulnerability affects your stack