nicephpscripts vulnerabilities

Products

• nice php faq script 2
• job board script 1

Latest nicephpscripts CVEs

Newest publication first

1. CVE-2017-15988 Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.

   Published 2017-10-31

   Critical·CVSS 9.8 EPSS 2.7%

   Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.

2. CVE-2017-15964 Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.

   Published 2017-10-29

   Critical·CVSS 9.8 EPSS 2.1%

   Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.

3. CVE-2008-6525 SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL commands via the Password parameter (aka the pass field).

   Published 2009-03-25

   High·CVSS 7.5 EPSS 2.0%

   SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL commands via the Password parameter (aka the pass field).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.