CVEvulnerability

CVE-2005-3976

7.5 HIGH Published 2005-12-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter.

Affected configurations

• duware duamazon 3.1 • duware duarticle 1.1 • duware duclassified 4.2 • duware dudirectory 3.1 • duware dudirectory pro 3.0 • duware dudirectory pro sql 3.0 • duware dudownload 1.1 • duware dugallery 3.3 • duware dunews 1.1 • duware dupaypal 3.1 • duware dupaypal pro 3.0

References