SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter, a different vector than CVE-2007-0631. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cascadianfaq | Eclectic_designs | * | 4.0 (including) |
| Cascadianfaq | Eclectic_designs | 4.1 (including) | 4.1 (including) |