← Database

CVE-2005-3976

HIGH CVSS: 7.5 Published: 2005-12-03 Modified: 2026-06-16

Description

SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter.

Affected Platforms

Duware DudownloadDuware DuclassifiedDuware Dudirectory Pro SqlDuware DuamazonDuware DugalleryDuware DupaypalDuware DunewsDuware DuarticleDuware Dudirectory ProDuware Dupaypal Pro

Weakness Type

NVD-CWE-Other

References