CVE-2005-3938

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-3938
SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in (1) index.php, (2) faq_qanda.php, (3) refer_friend.php, (4) print_article.php, or (5) add_comment.php.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.html Broken Link
http://secunia.com/advisories/17809 Third Party Advisory
http://www.osvdb.org/21257 Broken Link
http://www.osvdb.org/21258 Broken Link
http://www.osvdb.org/21259 Broken Link
http://www.osvdb.org/21260 Broken Link
http://www.osvdb.org/21261 Broken Link
http://www.securityfocus.com/bid/15653 Broken Link
http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.html Broken Link
http://secunia.com/advisories/17809 Third Party Advisory
http://www.osvdb.org/21257 Broken Link
http://www.osvdb.org/21258 Broken Link
http://www.osvdb.org/21259 Broken Link
http://www.osvdb.org/21260 Broken Link
http://www.osvdb.org/21261 Broken Link
http://www.securityfocus.com/bid/15653 Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:a:softbiz:faq:*:*:*:*:*:*:*:*
History

06 Apr 2026, 14:42

Type Values Removed Values Added
References () http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.html - () http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.html - Broken Link
References () http://secunia.com/advisories/17809 - Vendor Advisory () http://secunia.com/advisories/17809 - Third Party Advisory
References () http://www.osvdb.org/21257 - () http://www.osvdb.org/21257 - Broken Link
References () http://www.osvdb.org/21258 - () http://www.osvdb.org/21258 - Broken Link
References () http://www.osvdb.org/21259 - () http://www.osvdb.org/21259 - Broken Link
References () http://www.osvdb.org/21260 - () http://www.osvdb.org/21260 - Broken Link
References () http://www.osvdb.org/21261 - () http://www.osvdb.org/21261 - Broken Link
References () http://www.securityfocus.com/bid/15653 - Exploit () http://www.securityfocus.com/bid/15653 - Broken Link

21 Nov 2024, 00:03

Type Values Removed Values Added
References () http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.html - () http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.html -
References () http://secunia.com/advisories/17809 - Vendor Advisory () http://secunia.com/advisories/17809 - Vendor Advisory
References () http://www.osvdb.org/21257 - () http://www.osvdb.org/21257 -
References () http://www.osvdb.org/21258 - () http://www.osvdb.org/21258 -
References () http://www.osvdb.org/21259 - () http://www.osvdb.org/21259 -
References () http://www.osvdb.org/21260 - () http://www.osvdb.org/21260 -
References () http://www.osvdb.org/21261 - () http://www.osvdb.org/21261 -
References () http://www.securityfocus.com/bid/15653 - Exploit () http://www.securityfocus.com/bid/15653 - Exploit
Information

Published : 2005-12-01 06:03

Updated : 2026-04-06 14:42

NVD link : CVE-2005-3938

Mitre link : CVE-2005-3938

CVE.ORG link : CVE-2005-3938

JSON object : View

Products Affected

softbiz

  • faq
CWE
NVD-CWE-Other