CVE-2005-3976: Duware Duamazon

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter.

Affected products

• Duware Duamazon: version 3.1 only
• Duware Duarticle: version 1.1 only
• Duware Duclassified: version 4.2 only
• Duware Dudirectory: version 3.1 only
• Duware Dudirectory Pro: version 3.0 only
• Duware Dudirectory Pro SQL: version 3.0 only
• Duware Dudownload: version 1.1 only
• Duware Dugallery: version 3.3 only
• Duware Dunews: version 1.1 only
• Duware Dupaypal: version 3.1 only
• Duware Dupaypal Pro: version 3.0 only

Published 2005-12-03. Last modified 2026-06-16.