CVE-2005-3938

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in (1) index.php, (2) faq_qanda.php, (3) refer_friend.php, (4) print_article.php, or (5) add_comment.php.

• http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.htmlBroken Link
• http://secunia.com/advisories/17809Third Party Advisory
• http://www.osvdb.org/21257Broken Link
• http://www.osvdb.org/21258Broken Link
• http://www.osvdb.org/21259Broken Link
• http://www.osvdb.org/21260Broken Link
• http://www.osvdb.org/21261Broken Link
• http://www.securityfocus.com/bid/15653Broken Link
• http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.htmlBroken Link
• http://secunia.com/advisories/17809Third Party Advisory
• http://www.osvdb.org/21257Broken Link
• http://www.osvdb.org/21258Broken Link
• http://www.osvdb.org/21259Broken Link
• http://www.osvdb.org/21260Broken Link
• http://www.osvdb.org/21261Broken Link
• http://www.securityfocus.com/bid/15653Broken Link

Published

Dec 1, 2005

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3932SQL injection vulnerability in okiraku.php in O-Kiraku Nikki…
• CVE-2005-3933SQL injection vulnerability in index.php in 88Script's Event…
• CVE-2005-3934Buffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and a…
• CVE-2005-3935SQL injection vulnerability in SocketKB 1.1.0 and earlier al…
• CVE-2005-3936PHP file include vulnerability in SocketKB 1.1.0 and earlier…
• CVE-2005-3937SQL injection vulnerability in Softbiz B2B Trading Marketpla…
• CVE-2005-3939Multiple SQL injection vulnerabilities in WSN Knowledge Base…
• CVE-2005-3940SQL injection vulnerability in ringmaker.php in Orca Ringmak…
• CVE-2005-3941SQL injection vulnerability in blog.php in Orca Blog 1.3b an…
• CVE-2005-3942SQL injection vulnerability in knowledgebase-control.php in …
• CVE-2005-3943Multiple SQL injection vulnerabilities in ilyav FAQ System 1…
• CVE-2005-3944SQL injection vulnerability in survey.php in ilyav Survey Sy…