CVE-2005-3944

faq_system < 1.1 - SQL Injection via SURVEY_ID Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-3944. PoCs published by r0t.

AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Survey System versions 1.1 and prior. It outlines the issue and potential impact but does not include functional exploit code.

Description

SQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the SURVEY_ID parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by r0t · textwebappsphp
https://www.exploit-db.com/exploits/26661

The provided text describes a SQL injection vulnerability in Survey System versions 1.1 and prior. It outlines the issue and potential impact but does not include functional exploit code.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: Survey System 1.1 and prior
No auth needed
Prerequisites: Access to the vulnerable survey.php endpoint
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17800
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15641
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2654
Exploit vdb-entry x_refsource_osvdb
http://www.osvdb.org/21200

Scores

EPSS 0.0116
EPSS Percentile 64.1%

Details

Status published
Products (1)
faq_system/faq_system < 1.1
Published Dec 01, 2005
Tracked Since Feb 18, 2026