rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-3993 
Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service (crash) via invalid IMAP commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T00:00:00.000Z
CVE-2005-3995 
Format string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv before 1.0.0-pre4, when the syslog (-S) function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T00:00:00.000Z
CVE-2005-3996 
SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the admin_email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T00:00:00.000Z
CVE-2005-3997 
Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including (1) graphs/banner_daily.php, (2) graphs/banner_infobox.php, (3) graphs/banner_yearly.php, (4) graphs/banner_monthly.php, (5) application_bottom.php, (6) attributes_preview.php, (7) modules/category_product_listing.php, (8) modules/copy_to_confirm.php, (9) modules/delete_product_confirm.php, and (10) modules/move_product_confirm.php, which leaks the web server path in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T00:00:00.000Z
CVE-2005-3998 
Cross-site scripting (XSS) vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T00:00:00.000Z
CVE-2005-3999 
Cross-site scripting (XSS) vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T00:00:00.000Z
CVE-2005-4000 
Cross-site scripting (XSS) vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the sKeywords parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T00:00:00.000Z
CVE-2005-4001 
Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execute arbitrary SQL commands via the (1) haystack parameter to search_result.php or (2) ckey parameter to print_me.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T00:00:00.000Z
CVE-2005-4002 
WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T00:00:00.000Z
CVE-2005-4003 
Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and earlier, and Lite 2.1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) srch_product_name parameter to adv_search.asp and (2) b_search parameter to bsearch.asp.  NOTE: the original disclosure was specifically only for an XSS issue, but the CVE description was for SQL injection.  Since the original disclosure, SQL injection vectors have been reported.  This CVE might be REJECTed or significantly altered pending additional information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T00:00:00.000Z
CVE-2005-4004 
Cross-site scripting (XSS) vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T00:00:00.000Z
CVE-2005-4005 
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srch_text parameter in a Search and Sort option to messages.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T01:00:00.000Z
CVE-2005-4006 
SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to the usr/system files (1) insert_file.php, (2) insert_image.php, (3) insert_link.php, (4) insert_qcfile.php, and (5) edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T01:00:00.000Z
CVE-2005-4007 
Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving (1) mvc/controller/user_request_analysis.inc.php and (2) usr/xml/ddc/authorization.xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T01:00:00.000Z
CVE-2005-4008 
SQL injection vulnerability in jax_calendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter, and possibly the (2) Y and (3) m parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4009 
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid and (2) catid parameters to (a) day.php, (b) week.php, (c) month.php, and (d) year.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4010 
SQL injection vulnerability in KBase Express 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to category.php and (2) search parameters to search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4011 
SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4012 
Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4013 
PHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as statistics and the log directory location, possibly including the logdb.dta file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4014 
stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU consumption) via a large lastnumber value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4015 
PHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field, which allows remote attackers to fill the log files via a large number of requests, as demonstrated using pixel.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4016 
SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the (1) property_id, (2) zip_code, (3) property_type_id, (4) price, and (5) city_id parameters to property.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4017 
property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4018 
SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) start, (2) search_order, (3) search_type, (4) search_area, and (5) keyword parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4019 
SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the mls parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4020 
SQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote attackers to execute arbitrary SQL commands via the product_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4021 
The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4022 
Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4023 
Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4024 
Cross-site scripting (XSS) vulnerability in Interspire FastFind 2004 and 2005 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4025 
Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4026 
search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid (1) datestart and (2) dateend parameters, which leaks the web server path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4027 
SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4028 
Multiple cross-site scripting (XSS) vulnerabilities in aMember allow remote attackers to inject arbitrary web script or HTML via the (1) lamember_login parameter to sendpass.php and (2) login parameter to member.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4029 
WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, which could be useful in other attacks such as locking out valid users via brute force methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-05T11:00:00.000Z
CVE-2005-4030 
SQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTP_USER_AGENT header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4031 
Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4032 
Cross-site scripting (XSS) vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4033 
Nodezilla 0.4.13-corno-fulgure does not properly protect the evl_data directory, which could allow them to be shared when they are not protected by PRIVATEDATADIR in nodezilla.ini, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4034 
Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) pg, and (3) sortb parameters to (a) index.php; (4) cid parameter to (b) gift.php and (c) fq.php; and (5) cat parameter to (d) articles.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4035 
Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prod, and (2) brid parameters to (a) view.php; the (3) the bid parameter to (b) viewbrands.php; and the (4) grp and (5) cat parameters to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4036 
Cross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the "remote URL."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4037 
SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4038 
SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL commands via the idp parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4039 
Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4040 
SQL injection vulnerability in FileLister 0.51 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameters, possibly the searchwhat parameter to definesearch.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4041 
Cross-site scripting (XSS) vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4042 
Cross-site scripting (XSS) vulnerability in Warm Links 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to search.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4043 
SQL injection vulnerability in view.php in Hobosworld HobSR 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) arrange and (2) p parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4044 
Cross-site scripting (XSS) vulnerability in search.cgi in Amazon Search Directory 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-06T11:00:00.000Z
CVE-2005-4045 
Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator (TLA) default password via unknown vectors, possibly involving configure_toplevel_admin.ldif.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4046 
Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct man-in-the-middle (MITM) attacks and "compromise data privacy."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4047 
Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the a parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4048 
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4049 
Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4050 
Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to execute arbitrary code via a long INVITE field in a Session Initiation Protocol (SIP) packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4051 
e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4052 
e107 0.6174 allows remote attackers to redirect users to other web sites via the download parameter in rate.php, which is used after a user submits a file download rating.  NOTE: in the default installation, the e_BASE variable restricts the redirection to the same web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4053 
Cross-site scripting (XSS) vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter, as demonstrated using 26.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4054 
SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categoryid, (2) entryid, (3) year, (4) month, and (5) day parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4055 
SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) page and (2) car parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4056 
SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) Location, (2) Last Name, and (3) First Name parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4057 
Cross-site scripting (XSS) vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Location, (2) Last Name, and (3) First Name parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4058 
SQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to viewprofile.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4059 
SQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to execute arbitrary SQL commands via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4060 
Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4061 
Cross-site scripting (XSS) vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrary web script or HTML via the search parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4062 
Cross-site scripting (XSS) vulnerability in CPSearch.asp in XcClassified 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4063 
Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) L, (2) sort, (3) category, (4) categoryname parameters to search.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4064 
Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z