CVE-2008-6525 SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL commands via the Password parameter (aka the pass field).
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL commands via the Password parameter (aka the pass field).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nicephpscripts nice php faq script | All versions | No fix listed |
References
- 32150 exploit vdb-entry
- nicephpfaq-unspecified-sql-injection(46402) vdb-entry
- 7018 exploit