CVE-2016-5843 Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL....
CriticalCVSS 9.4
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OTRS AG faq | = 2.0.1 | No fix listed |
| OTRS AG faq | = 2.0.2 | No fix listed |
| OTRS AG faq | = 2.0.3 | No fix listed |
| OTRS AG faq | = 2.0.4 | No fix listed |
| OTRS AG faq | = 2.0.5 | No fix listed |
| OTRS AG faq | = 2.0.6 | No fix listed |
| OTRS AG faq | = 2.0.7 | No fix listed |
| OTRS AG faq | = 2.0.8 | No fix listed |
| OTRS AG faq | = 2.1.0 | No fix listed |
| OTRS AG faq | = 2.1.1 | No fix listed |
| OTRS AG faq | = 2.1.2 | No fix listed |
| OTRS AG faq | = 2.1.3 | No fix listed |
| OTRS AG faq | = 2.1.4 | No fix listed |
| OTRS AG faq | = 2.2.0 | No fix listed |
| OTRS AG faq | = 2.2.1 | No fix listed |
| OTRS AG faq | = 2.2.2 | No fix listed |
| OTRS AG faq | = 2.2.3 | No fix listed |
| OTRS AG faq | = 2.3.0 | No fix listed |
| OTRS AG faq | = 2.3.1 | No fix listed |
| OTRS AG faq | = 2.3.2 | No fix listed |
| OTRS AG faq | = 2.3.3 | No fix listed |
| OTRS AG faq | = 2.3.4 | No fix listed |
| OTRS AG faq | = 4.0.0 | No fix listed |
| OTRS AG faq | = 4.0.1 | No fix listed |
| OTRS AG faq | = 4.0.2 | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| OTRS AG faq | = 4.0.3 | No fix listed |
| OTRS AG faq | = 5.0.0 | No fix listed |
| OTRS AG faq | = 5.0.1 | No fix listed |
| OTRS AG faq | = 5.0.2 | No fix listed |
| OTRS AG faq | = 5.0.3 | No fix listed |
| alpine/gst-plugins-bad1(Alpine:v3.4) | < 1.8.3-r0 | 1.8.3-r0 |
| alpine/gst-plugins-bad1(Alpine:v3.5) | < 1.8.3-r0 | 1.8.3-r0 |
References
- 93019 vdb-entry
- github.com issue-tracking patch
- github.com issue-tracking patch
- github.com issue-tracking patch
- www.otrs.com vendor-advisory
- security.alpinelinux.org vendor-advisory