CVE-2005-3976

Published: Dec 3, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter.

Affected (11)

Products: Duware: Duamazon, Duarticle, Duclassified, Dudirectory, Dudirectory Pro, Dudirectory Pro Sql, Dudownload, Dugallery, Dunews, Dupaypal, Dupaypal Pro

11 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Duware Duamazon	Version 3.1
Duware Duarticle	Version 1.1
Duware Duclassified	Version 4.2
Duware Dudirectory	Version 3.1
Duware Dudirectory Pro	Version 3.0
Duware Dudirectory Pro Sql	Version 3.0
Duware Dudownload	Version 1.1
Duware Dugallery	Version 3.3
Duware Dunews	Version 1.1
Duware Dupaypal	Version 3.1
Duware Dupaypal Pro	Version 3.0