A Faq

a-faq

Vendor: Alan Ward • 2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-6831 1Alan Ward 1A Faq Apr 23, 2026 Dec 31, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catcode parameter.
CVE-2005-4064 1Alan Ward 1A Faq Apr 16, 2026 Dec 7, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp.