CVE-2005-3943

CVE-2005-3943 describes multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier. Attackers can exploit these flaws by manipulating the FAQ_ID and action parameters in viewFAQ.php, or the CATEGORY_ID parameter in index.php. This vulnerability has a CVSS score of 7.5, indicating high severity, as it allows unauthenticated remote attackers to execute arbitrary SQL commands, potentially leading to data compromise, integrity issues, and denial of service. While not listed on the KEV catalog, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.