Vulnerabilities (CVE)

Filtered by vendor Alan Ward Subscribe
Filtered by product A-faq
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-6831 1 Alan Ward 1 A-faq 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catcode parameter.
CVE-2005-4064 1 Alan Ward 1 A-faq 2024-02-28 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp.