Unscored CVE-2005-4359 EUVD-2005-4354GHSA-6587-ppvj-ch5c

SQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to execute arbitrary SQL commands via the (1) c…

Published Dec 20, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to execute arbitrary SQL commands via the (1) cat and (2) srcText parameters to faq.php.

References

21790 vdb-entry
http://pridels0.blogspot.com/2005/12/odfaq-sql-inj-vuln.html
ADV-2005-2994 vdb-entry
18121 third-party-advisory