| |
Vulnerability CVE-2005-0475
Published: 2005-03-30 Modified: 2012-02-12
| Description: |
SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) offset, (2) limit, (3) order, or (4) orderby parameter to question.php, (5) offset parameter to answer.php, (6) search_item parameter to search.php, (7) cat_id, (8) cid, or (9) id parameter to comment.php. |
CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
6.4/10 |
4.9/10 |
10/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
None |
References: |
http://marc.theaimsgroup.com/?l=bugtraq&m=110868808723487&w=2
http://xforce.iss.net/xforce/xfdb/19371
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
