CVE-2005-3046

Description

SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privileges via the user field.

Affected products

• phpMyFAQ / phpMyFAQ1.5.1 – 1.5.1

References

• MISChttp://rgod.altervista.org/phpmyfuck151.html
• MAILING_LISThttp://marc.info/?l=bugtraq&m=112749230124091&w=2