Unscored severity · published May 25, 2005
CVE-2005-1786
SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter
–
CVSS
1.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
Funkyasp AD System · Funkyasp
1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1786
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1786
Vendor Advisory
http://secunia.com/advisories/15494
securitytracker.com
http://securitytracker.com/id?1014056
Patch
http://www.funkyasp.co.uk/product.asp?prod=1¤cy=USD
Exploit
http://www.under9round.com/funky-asp.txt