5
CVSSv2

CVE-2005-0702

Published: 07/03/2005 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote malicious users to add FAQ records to the database via the username field in forum messages.

Vulnerable Product Search on Vulmon Subscribe to Product

phpmyfaq phpmyfaq 1.4_alpha1

phpmyfaq phpmyfaq 1.4_alpha2

phpmyfaq phpmyfaq 1.4a

phpmyfaq phpmyfaq 1.5

phpmyfaq phpmyfaq 1.4