CVE-2005-0475

paFaq beta4 - 'question.php' Multiple SQL Injections

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2005-0475 has a selected CVSS score of 6.4; EIP currently links 4 catalogued exploits.

Description

SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) offset, (2) limit, (3) order, or (4) orderby parameter to question.php, (5) offset parameter to answer.php, (6) search_item parameter to search.php, (7) cat_id, (8) cid, or (9) id parameter to comment.php.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
4

Proofs of concept

4

Catalogued exploits

ExploitDBpaFaq beta4 - 'question.php' Multiple SQL InjectionsExploitDB exploitby pi3chNot analyzed1 file
ExploitDB
PoC details
ExploitDBpaFaq beta4 - 'answer.php?offset' SQL InjectionExploitDB exploitby pi3chNot analyzed1 file
ExploitDB
PoC details
ExploitDBpaFaq beta4 - 'search.php?search_item' SQL InjectionExploitDB exploitby pi3chNot analyzed1 file
ExploitDB
PoC details
ExploitDBpaFaq beta4 - 'comment.php' Multiple SQL InjectionsExploitDB exploitby pi3chNot analyzed1 file
ExploitDB
PoC details

References

3