CVE-2005-2466

CVE-2005-2466 describes multiple SQL injection vulnerabilities in the auth_user function within admin.php of OpenBook 1.2.2. Attackers can exploit these flaws by injecting malicious SQL commands into the username or password parameters, potentially leading to unauthorized data access or modification. With a CVSS score of 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N), this vulnerability is remotely exploitable with low attack complexity and no authentication required, allowing for partial confidentiality and integrity impact. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an exploit is publicly available on ExploitDB, though community discussion and media coverage remain minimal.