A-FAQ 1.0 - faqDsp.asp?catcode SQL Injection

A-FAQ 1.0 - faqDsp.asp?catcode SQL Injection source: https://www.securityfocus.com/bid/15741/info A-FAQ is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

A-FAQ SQL inj. vuln.

A-FAQ SQL inj. vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/faq-sql-inj-vuln.html vendor:http://www.alanward.net/afaq affected version:1.0 and prior Product Description: A-FAQ is an ASP application used for managing a database of questions...

A-FAQ 1.0 - faqDspItem.asp?faqid SQL Injection

A-FAQ 1.0 - faqDspItem.asp?faqid SQL Injection source: https://www.securityfocus.com/bid/15741/info A-FAQ is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

A-FAQ 1.0 - 'faqDspItem.asp?faqid' SQL Injection

source: https://www.securityfocus.com/bid/15741/info A-FAQ is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

A-FAQ 1.0 - 'faqDsp.asp?catcode' SQL Injection

source: https://www.securityfocus.com/bid/15741/info A-FAQ is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

CVE-2005-3943

CVE-2005-3943 affects ilyav FAQ System v1.1 and earlier, with multiple SQL injection vulnerabilities. The flaws allow remote attackers to inject SQL via (1) FAQ_ID and (2) action in viewFAQ.php, and (3) CATEGORY_ID in index.php. NVD lists a CVSSv2 base score of 7.5 (HIGH) with network access, low...

CVE-2005-3943

Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 FAQID and 2 action parameters in a viewFAQ.php; and 3 CATEGORYID parameter in b index.php...

CVE-2005-3938

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in 1 index.php, 2 faqqanda.php, 3 referfriend.php, 4 printarticle.php, or 5 addcomment.php...

CVE-2005-3938

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2005-3943

Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 FAQID and 2 action parameters in a viewFAQ.php; and 3 CATEGORYID parameter in b index.php...

CVE-2005-3938

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in 1 index.php, 2 faqqanda.php, 3 referfriend.php, 4 printarticle.php, or 5 addcomment.php...

CVE-2005-3938

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in 1 index.php, 2 faqqanda.php, 3 referfriend.php, 4 printarticle.php, or 5 addcomment.php...

SoftBiz FAQ 1.1 - index.php?cid SQL Injection

SoftBiz FAQ 1.1 - index.php?cid SQL Injection source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allo...

SoftBiz FAQ 1.1 - add_comment.php?id SQL Injection

SoftBiz FAQ 1.1 - addcomment.php?id SQL Injection source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

SoftBiz FAQ 1.1 - 'print_article.php?id' SQL Injection

source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...

SoftBiz FAQ 1.1 - 'refer_friend.php?id' SQL Injection

source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...

SoftBiz FAQ 1.1 - 'faq_qanda.php?id' SQL Injection

source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...

SoftBiz FAQ 1.1 - print_article.php?id SQL Injection

SoftBiz FAQ 1.1 - printarticle.php?id SQL Injection source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit coul...

SoftBiz FAQ 1.1 - 'add_comment.php?id' SQL Injection

source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...

SoftBiz FAQ 1.1 - refer_friend.php?id SQL Injection

SoftBiz FAQ 1.1 - referfriend.php?id SQL Injection source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...