CVE-2005-4064

Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp.

Date published : 2005-12-07

http://www.securityfocus.com/bid/15741

http://pridels0.blogspot.com/2005/12/faq-sql-inj-vuln.html