{
    "id": "CVE-2005-3423",
    "published": "2005-11-01 22:02:00",
    "last_modified": "2026-06-16 22:16:56",
    "cvss_score": "7.5",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
    "cwe": null,
    "description": "Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php.",
    "epss_score": "0.02173",
    "epss_percentile": "0.81788",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-10 18:17:04",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "subdreamer",
            "product": "subdreamer"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "1278",
            "title": "Subdreamer 2.2.1 - SQL Injection / Command Execution",
            "date": "2005-10-31",
            "url": "https://www.exploit-db.com/exploits/1278"
        }
    ],
    "refs_list": [
        "http://rst.void.ru/papers/advisory35.txt",
        "http://secunia.com/advisories/17378",
        "http://www.osvdb.org/20378",
        "http://www.osvdb.org/20379",
        "http://www.osvdb.org/20380",
        "http://www.osvdb.org/20381",
        "http://www.osvdb.org/20382",
        "http://www.osvdb.org/20384",
        "http://www.securityfocus.com/bid/15238",
        "http://rst.void.ru/papers/advisory35.txt",
        "http://secunia.com/advisories/17378",
        "http://www.osvdb.org/20378",
        "http://www.osvdb.org/20379",
        "http://www.osvdb.org/20380",
        "http://www.osvdb.org/20381",
        "http://www.osvdb.org/20382",
        "http://www.osvdb.org/20384",
        "http://www.securityfocus.com/bid/15238"
    ]
}