Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-3943. PoCs published by r0t.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in FAQ System versions 1.1 and prior. It outlines vulnerable parameters in the 'viewFAQ.php' script but does not include executable exploit code.
Description
Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) FAQ_ID and (2) action parameters in (a) viewFAQ.php; and (3) CATEGORY_ID parameter in (b) index.php.
Exploits (2)
The provided text describes SQL injection vulnerabilities in FAQ System versions 1.1 and prior. It outlines vulnerable parameters in the 'viewFAQ.php' script but does not include executable exploit code.
The provided text describes a SQL injection vulnerability in FAQ System versions 1.1 and prior. It outlines the vulnerability's cause and potential impact but does not include actual exploit code.