CVE-2005-3938

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in (1) index.php, (2) faq_qanda.php, (3) refer_friend.php, (4) print_article.php, or (5) add_comment.php.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.htmlBroken Link
http://secunia.com/advisories/17809Third Party Advisory
http://www.osvdb.org/21257Broken Link
http://www.osvdb.org/21258Broken Link
http://www.osvdb.org/21259Broken Link
http://www.osvdb.org/21260Broken Link
http://www.osvdb.org/21261Broken Link
http://www.securityfocus.com/bid/15653Broken Link
http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.htmlBroken Link
http://secunia.com/advisories/17809Third Party Advisory
http://www.osvdb.org/21257Broken Link
http://www.osvdb.org/21258Broken Link
http://www.osvdb.org/21259Broken Link
http://www.osvdb.org/21260Broken Link
http://www.osvdb.org/21261Broken Link
http://www.securityfocus.com/bid/15653Broken Link

Timeline

Published: Dec 1, 2005
Last modified: Jun 16, 2026
NVD status: Analyzed

Related CVEs from 2005

CVE-2005-39397.5Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrary SQL commands via t CVE-2005-39407.5SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands vi CVE-2005-39417.5SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg CVE-2005-39427.5SQL injection vulnerability in knowledgebase-control.php in Orca Knowledgebase 2.1b and earlier allows remote attackers to execute arbitrary CVE-2005-39437.5Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the CVE-2005-39447.5SQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands v CVE-2005-39457.8The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predicta CVE-2005-39465.0Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember J CVE-2005-39475.0Directory traversal vulnerability in index.php in PHP Upload Center allows remote attackers to read arbitrary files via "../" sequences in t CVE-2005-39485.0Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd CVE-2005-39497.5Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) startid par CVE-2005-39506.8nuauth in NuFW 1.0.x before 1.0.16 and 1.1 allows authenticated users to cause a denial of service via malformed packets.