VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 3, 2005· Updated Jun 16, 2026

CVE-2005-3976

CVE-2005-3976

Description

SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Duware/Duamazon2 versions
    cpe:2.3:a:duware:duamazon:3.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:duware:duamazon:3.1:*:*:*:*:*:*:*
    • (no CPE)range: =3.1
  • Duware/Duarticle
    cpe:2.3:a:duware:duarticle:1.1:*:*:*:*:*:*:*
  • Duware/Duclassified
    cpe:2.3:a:duware:duclassified:4.2:*:*:*:*:*:*:*
  • Duware/Dudirectory4 versions
    cpe:2.3:a:duware:dudirectory:3.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:duware:dudirectory:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:duware:dudirectory_pro:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:duware:dudirectory_pro_sql:3.0:*:*:*:*:*:*:*
    • (no CPE)range: =3.0, =3.0 SQL
  • Duware/Dudownload
    cpe:2.3:a:duware:dudownload:1.1:*:*:*:*:*:*:*
  • Duware/Dugallery
    cpe:2.3:a:duware:dugallery:3.3:*:*:*:*:*:*:*
  • Duware/Dunews
    cpe:2.3:a:duware:dunews:1.1:*:*:*:*:*:*:*
  • Duware/Dupaypal
    cpe:2.3:a:duware:dupaypal:3.1:*:*:*:*:*:*:*
  • Duware/Dupaypal Pro
    cpe:2.3:a:duware:dupaypal_pro:3.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.