CVE-2005-3882

Published: Nov 29, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected (1)

Products: Faqsystems: Faqring Knowledge Base Software

Faqsystems

1 product

Faqring Knowledge Base Software

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Faqsystems Faqring Knowledge Base Software	version ≤ 3.0

References (10)

http://pridels0.blogspot.com/2005/11/faqring-30-sql-inj-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/17811

Source: cve@mitre.org

http://www.osvdb.org/21265

Source: cve@mitre.org

http://www.securityfocus.com/bid/15655

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2625

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/faqring-30-sql-inj-vuln.html