Detections
Analytics
paFAQ Multiple Vulnerabilities
high Nessus Network Monitor Plugin ID 2629
Synopsis
The remote web server contains scripts that are vulnerable to a SQL injection attack.Description
The remote host is running paFAQ, a web-based 'Frequently Asked Questions' (FAQ) generator. This version of paFAQ is vulnerable to a SQL injection attack. An attacker exploiting this flaw would be able to read/modify data or execute commands as the web server process.In addition, this version of paFAQ is vulnerable to a remote cross-site scripting (XSS) flaw as well as a flaw within the backup.php script that would allow a remote attacker full access to the application database.
Solution
Upgrade or patch according to vendor recommendations.See Also
http://www.gulftech.org/?node=research&article_id=00083-06202005
http://archives.neohapsis.com/archives/bugtraq/2005-02/0269.html
http://archives.neohapsis.com/archives/bugtraq/2005-06/0155.html
Plugin Details
Severity: High
ID: 2629
Family: CGI
Published: 2/18/2005
Updated: 3/6/2019
Nessus ID: 18535
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 7.3
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:H/RL:U/RC:X
Vulnerability Information
CPE: cpe:/a:php_arena:pafaq
Reference Information
CVE: CVE-2005-0475, CVE-2005-2011, CVE-2005-2012, CVE-2005-2013, CVE-2005-2014