CVE-2005-4064

EPSS 1.2%

Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/26747unverified exploitdbwww.exploit-db.com/exploits/26746unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2005/12/faq-sql-inj-vuln.html http://secunia.com/advisories/17900 http://www.osvdb.org/21472 http://www.osvdb.org/21473 http://www.securityfocus.com/bid/15741 http://www.vupen.com/english/advisories/2005/2763