CVE-2005-3046: SQL Injection

Published Sep 23, 2005

Updated

SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privileges via the user field.

Affected Software

1 affected component

PhpMyFaq phpmyfaq=1.5.1

Event History

Sep 23, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3046?

CVE-2005-3046 is classified as a high severity vulnerability due to the potential for remote code execution and database manipulation.

How do I fix CVE-2005-3046?

To fix CVE-2005-3046, upgrade phpMyFAQ to version 1.5.2 or later, which addresses the SQL injection vulnerability.

What are the implications of CVE-2005-3046?

The implications of CVE-2005-3046 include unauthorized access to administrator privileges and potential data breaches.

Who is affected by CVE-2005-3046?

Users of phpMyFAQ version 1.5.1 are affected by CVE-2005-3046, specifically those not patched against this vulnerability.

What can attackers exploit in CVE-2005-3046?

Attackers can exploit CVE-2005-3046 to modify SQL queries through the user field, allowing for privilege escalation.