Vulnerabilities

TI-2017-11718 CVE-2017-15988 · GHSA-cgh5-wwxm-vx88

Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a…

MEDIUM 47

Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02652 Published 2017-10-31 No fix listed CWE-89

TI-2017-11694 CVE-2017-15964 · GHSA-g4ph-fxgr-3cfh

Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.

MEDIUM 46

Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02148 Published 2017-10-29 No fix listed CWE-89

TI-2008-06215 CVE-2008-6525 · GHSA-rwv5-mmj4-5pgv

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base…

LOW 37

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL commands via the Password parameter (aka the pass field).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0199 Published 2009-03-25 No fix listed CWE-89

Vulnerabilities

Filters

Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a…

Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base…