CVE-2005-3882 SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| faqsystems faqring knowledge base software | <= 3.0 | No fix listed |
References
- pridels0.blogspot.com
- 17811 third-party-advisory
- 21265 vdb-entry
- 15655 vdb-entry
- ADV-2005-2625 vdb-entry