medium6.4Public exploit code
CVE-2005-0475
SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) offset, (2) limit, (…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- paFaq beta4 - 'comment.php' Multiple SQL Injections2005-02-17 · webapps · php · Verified
- paFaq beta4 - 'search.php?search_item' SQL Injection2005-02-17 · webapps · php · Verified
- paFaq beta4 - 'answer.php?offset' SQL Injection2005-02-17 · webapps · php · Verified
- paFaq beta4 - 'question.php' Multiple SQL Injections2005-02-17 · webapps · php · Verified
Impact
SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) offset, (2) limit, (3) order, or (4) orderby parameter to question.php, (5) offset parameter to answer.php, (6) search_item parameter to search.php, (7) cat_id, (8) cid, or (9) id parameter to comment.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php Arena | Pafaq | Version beta4 |