Unrated severityNVD Advisory· Published Mar 7, 2005· Updated Jun 16, 2026
CVE-2005-0702
CVE-2005-0702
Description
SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.
Affected products
6cpe:2.3:a:phpmyfaq:phpmyfaq:1.4:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:phpmyfaq:phpmyfaq:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyfaq:phpmyfaq:1.4_alpha1:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyfaq:phpmyfaq:1.4_alpha2:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyfaq:phpmyfaq:1.4a:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyfaq:phpmyfaq:1.5:*:*:*:*:*:*:*
- (no CPE)range: 1.4, 1.5
Patches
Vulnerability mechanics
References
2- secunia.com/advisories/14516nvdPatchVendor Advisory
- www.phpmyfaq.de/advisory_2005-03-06.phpnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.