CVE-2005-3852

Published: Nov 27, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in search.asp in Online Work Order Suite (OWOS) Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.

Affected (1)

Products: Onlinetechtools.com: Owos Lite

Onlinetechtools.com

1 product

Owos Lite

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Onlinetechtools.com Owos Lite	Version 3.0

References (8)

http://pridels0.blogspot.com/2005/11/owos-lite-30-sql-inj.html

Source: cve@mitre.org

http://secunia.com/advisories/17711

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21116

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2584

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/owos-lite-30-sql-inj.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17711

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/21116

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/2584

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.