Description
Multiple SQL injection vulnerabilities in the auth_user function in admin.php in OpenBook 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.
Exploits (1)
References (6)
Core 6
Core References
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/14444
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/21643
Exploit vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1014606
Exploit vdb-entry
x_refsource_osvdb
http://www.osvdb.org/18475
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/1301
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112291283419785&w=2
Scores
EPSS
0.0055
EPSS Percentile
68.3%
Details
Status
published
Products (1)
openbook/openbook
1.2.2
Published
Dec 31, 2005
Tracked Since
Feb 18, 2026