CVE-2005-4064 in A-FAQ

Summary

Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 12/07/2005
• Disclosure: 12/07/2005
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-89 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.01217
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-4064
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-4064
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-4064/