CVE-2005-0725: SQL Injection
Published Mar 8, 2005
·Updated
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php.
Affected Software
1 affected component
WF-Sections WF-Sections=1.07
Event History
Mar 8, 2005
CVE Published
05:00 AM
Mar 12, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0725?
CVE-2005-0725 has been classified as a moderate severity vulnerability due to its potential for SQL injection attacks.
2
How do I fix CVE-2005-0725?
To mitigate CVE-2005-0725, ensure to sanitize input parameters and use prepared statements for SQL queries in the getAllbyArticle function.
3
Which software versions are affected by CVE-2005-0725?
CVE-2005-0725 affects versions of WF-Sections, specifically 1.07.
4
What type of attack is enabled by CVE-2005-0725?
CVE-2005-0725 allows remote attackers to execute arbitrary SQL commands via the articleid parameter.
5
Where does the CVE-2005-0725 vulnerability occur?
CVE-2005-0725 occurs in the wfsfiles.php file within the getAllbyArticle function.