CVE-2005-3865

CVE-2005-3865 describes a SQL injection vulnerability in the web app component: AllWeb search 3.0 and earlier. The flaw is in the index.php file, where the vulnerable point is the search parameter, allowing remote attackers to execute arbitrary SQL commands. The available documents identify the a...