CVE-2005-2012

Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username or 2 id parameters...

CVE-2005-2014

The vulnerability CVE-2005-2014 affects the web-based FAQ system paFAQ 1.0 Beta 4 . The issue lies in the "upload a language pack" feature, which allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack. The CVE entry notes a MEDIUM sever...

PAFaq - Question Cross-Site Scripting

PAFaq - Question Cross-Site Scripting source: https://www.securityfocus.com/bid/14001/info paFaq is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scri...

PAFaq - Administrator Username SQL Injection

PAFaq - Administrator Username SQL Injection source: https://www.securityfocus.com/bid/14003/info paFaq is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

PAFaq - Question Cross-Site Scripting

source: https://www.securityfocus.com/bid/14001/info paFaq is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

PAFaq - Administrator 'Username' SQL Injection

source: https://www.securityfocus.com/bid/14003/info paFaq is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the applicatio...

CVE-2005-0475

SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the 1 offset, 2 limit, 3 order, or 4 orderby parameter to question.php, 5 offset parameter to answer.php, 6 searchitem parameter to search.php, 7 catid, 8 cid, or 9 i...

paFAQBeta4.txt

PersianHacker.NET 200505-07 paFAQ Beta4 Sql Injection Date: 2005 February Bug Number: 07 paFAQ is a feature rich FAQ/Knowledge base system allowing webmasters to keep an organized database of Frequently Asked Questions. paFAQ also makes a great Knowledge Database for problems and solutions relate...

CVE-2005-0475

SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the 1 offset, 2 limit, 3 order, or 4 orderby parameter to question.php, 5 offset parameter to answer.php, 6 searchitem parameter to search.php, 7 catid, 8 cid, or 9 i...

CVE-2005-0475

CVE-2005-0475 affects paFAQ Beta4 (PHP/MySQL). It is a SQL injection vulnerability allowing remote attackers to inject arbitrary SQL via parameters in question.php (offset, limit, order, orderby), answer.php (offset), search.php (search_item), and comment.php (cat_id, cid, id). The NVD entry docu...

[PersianHacker.NET 200505-07] paFAQ Beta4 Sql Injection

PersianHacker.NET 200505-07 paFAQ Beta4 Sql Injection Date: 2005 February Bug Number: 07 paFAQ is a feature rich FAQ/Knowledge base system allowing webmasters to keep an organized database of Frequently Asked Questions. paFAQ also makes a great Knowledge Database for problems and solutions relate...

paFaq beta4 - comment.php Multiple SQL Injections

paFaq beta4 - comment.php Multiple SQL Injections source: https://www.securityfocus.com/bid/12582/info paFaq is reportedly affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successfu...

paFaq beta4 - 'search.php?search_item' SQL Injection

source: https://www.securityfocus.com/bid/12582/info paFaq is reportedly affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...

paFaq beta4 - question.php Multiple SQL Injections

paFaq beta4 - question.php Multiple SQL Injections source: https://www.securityfocus.com/bid/12582/info paFaq is reportedly affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successf...

paFaq beta4 - 'answer.php?offset' SQL Injection

source: https://www.securityfocus.com/bid/12582/info paFaq is reportedly affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...

paFaq beta4 - 'question.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/12582/info paFaq is reportedly affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...