CVE-2005-2561

MYFAQ 1.0 contains multiple SQL injection vulnerabilities reachable via the Theme, SousTheme, Faq, and question parameters across several PHP pages (affichagefaq.php3, choixsoustheme.php3, consultation.php3, insfaq.php3, inssoustheme.php3, instheme.php3, saisiefaqtotale.php3, saisiesoustheme.php3...

CVE-2005-2561: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MYFAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the Theme parameter to 1 affichagefaq.php3, 2 choixsoustheme.php3, 3 consultation.php3, 4 insfaq.php3, 5 inssoustheme.php3, 6 instheme.php3, 7 saisiefaqtotale.php3, 8...