CVE-2005-3881

SQL injection vulnerability in search.php in AtlantisFAQ Knowledge Base Software 2.03 and earlier allows remote attackers to execute arbitrary SQL commands via the searchStr parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-11-29

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Altantis Knowledge Base Software (Altantisfaq)

References

• http://pridels0.blogspot.com/2005/11/altantisfaq-sql-inj-vuln.html
• http://secunia.com/advisories/17812
• http://www.osvdb.org/21267
• http://www.securityfocus.com/bid/15654
• http://www.vupen.com/english/advisories/2005/2624