Description
SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.
References
- 14516 third-party-advisory
- http://www.phpmyfaq.de/advisory_2005-03-06.php
Published Mar 9, 2005 · Updated Aug 7, 2024 · Assigned by mitre
SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.