CVE-2005-1805

Online Solutions for Educators - SQL Injection via login.asp Password Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-1805. PoCs published by Dj romty.

AI-analyzed exploit summary The exploit demonstrates an SQL injection vulnerability in os4e's 'login.asp' script by injecting a malformed password input. This bypasses authentication by manipulating the SQL query logic.

Description

SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote attackers to execute arbitrary SQL commands via the password.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Dj romty · textwebappsasp
https://www.exploit-db.com/exploits/25751

The exploit demonstrates an SQL injection vulnerability in os4e's 'login.asp' script by injecting a malformed password input. This bypasses authentication by manipulating the SQL query logic.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: os4e (all versions)
No auth needed
Prerequisites: Access to the login page of the vulnerable application
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13804
Vendor Advisory vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1014072
Vendor Advisory, URL Repurposed x_refsource_misc
http://www.under9round.com/os4e.txt
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/0645

Scores

EPSS 0.0112
EPSS Percentile 62.2%

Details

Status published
Products (1)
online_solutions_for_educators/online_solutions_for_educators
Published May 28, 2005
Tracked Since Feb 18, 2026