CVE-2005-2012

CVE-2005-2012 describes multiple SQL injection vulnerabilities in paFAQ 1.0 Beta 4, specifically affecting the login function. Remote attackers can exploit these flaws by manipulating the username or id parameters to execute arbitrary SQL commands and bypass authentication. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low access complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, an exploit for this vulnerability is publicly available on ExploitDB, though there is no indication of active exploitation or significant community discussion.