CVE-2005-3596

Published: Nov 16, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.

Affected (1)

Products: Iisworks: Aspknowledgebase

Iisworks

1 product

Aspknowledgebase

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Iisworks Aspknowledgebase	All versions

References (12)

http://marc.info/?l=bugtraq&m=113156859811594&w=2

Source: cve@mitre.org

http://osvdb.org/20712

Source: cve@mitre.org

http://secunia.com/advisories/17517/

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/15364/

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2375

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23038

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=113156859811594&w=2