CVE-2005-0702

SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-03-07

Last modified

2024-08-07

Affected products

• Phpmyfaq (Phpmyfaq)

References

• http://secunia.com/advisories/14516
• http://www.phpmyfaq.de/advisory_2005-03-06.php