CVE-2005-3882 in FAQRing Knowledge Base Software

Riassunto

di MITRE

SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 29/11/2005
• Divulgazione: 29/11/2005
• Moderazione: accettato
• Voce: VDB-27155
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.01120
• KEV: no
• Attività: molto basso
• Settore: Insurance, Government, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-3882
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-3882
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-3882/