CVE-2005-3882 in FAQRing Knowledge Base Software

Sumário

de MITRE

SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 29/11/2005
• Divulgação: 29/11/2005
• Moderação: aceite
• Entrada: VDB-27155
• CPE: pronto
• CWE: CWE-89 (confirmado)
• Exploração: Descarregar
• CVSS: 7.5 (NVD)
• EPSS: 0.01120
• KEV: não
• Atividades: muito baixo
• Sector: Chemical, Insurance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-3882
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-3882
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-3882/