Lucene search

A-Faq Security Vulnerabilities

cve

CVE-2005-4064

Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp.

8.9AI Score

0.004EPSS

2005-12-07 11:03 AM

cve

CVE-2006-6831

SQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catcode parameter.

8.8AI Score

0.002EPSS

2007-01-01 11:00 PM