CVE-2016-5843
CRITICAL
9.4
CVSS Severity Score
Vulnerability Description
Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.
Affected Platforms (CPE)
📦
Otrs
Faq
= 2.0.1📦
Otrs
Faq
= 2.0.2📦
Otrs
Faq
= 2.0.3📦
Otrs
Faq
= 2.0.4📦
Otrs
Faq
= 2.0.5📦
Otrs
Faq
= 2.0.6📦
Otrs
Faq
= 2.0.7📦
Otrs
Faq
= 2.0.8📦
Otrs
Faq
= 2.1.0📦
Otrs
Faq
= 2.1.1📦
Otrs
Faq
= 2.1.2📦
Otrs
Faq
= 2.1.3📦
Otrs
Faq
= 2.1.4📦
Otrs
Faq
= 2.2.0📦
Otrs
Faq
= 2.2.1📦
Otrs
Faq
= 2.2.2📦
Otrs
Faq
= 2.2.3📦
Otrs
Faq
= 2.3.0📦
Otrs
Faq
= 2.3.1📦
Otrs
Faq
= 2.3.2📦
Otrs
Faq
= 2.3.3📦
Otrs
Faq
= 2.3.4📦
Otrs
Faq
= 4.0.0📦
Otrs
Faq
= 4.0.1📦
Otrs
Faq
= 4.0.2📦
Otrs
Faq
= 4.0.3📦
Otrs
Faq
= 5.0.0📦
Otrs
Faq
= 5.0.1📦
Otrs
Faq
= 5.0.2📦
Otrs